CVE-2013-0141

Published: May 1, 2013Modified: Apr 29, 2026

4.3

Vector

AV:A/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 5.5 / Impact: 4.9

Source: NVD

Description

Directory traversal vulnerability in McAfee ePolicy Orchestrator (ePO) before 4.5.7 and 4.6.x before 4.6.6 allows remote attackers to upload arbitrary files via a crafted request over the Agent-Server communication channel, as demonstrated by writing to the Software/ directory.

Affected (21)

Products: Mcafee: Epolicy Orchestrator

Mcafee

1 product

Epolicy Orchestrator

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Mcafee Epolicy Orchestrator	Up to 4.5.6
Mcafee Epolicy Orchestrator	Version 2.0
Mcafee Epolicy Orchestrator	Version 2.5.1
Mcafee Epolicy Orchestrator	Version 2.5
Mcafee Epolicy Orchestrator	Version 2.5 sp1
Mcafee Epolicy Orchestrator	Version 3.0
Mcafee Epolicy Orchestrator	Version 3.0 sp2a
Mcafee Epolicy Orchestrator	Version 3.5.0
Mcafee Epolicy Orchestrator	Version 3.6.0
Mcafee Epolicy Orchestrator	Version 3.6.1
Mcafee Epolicy Orchestrator	Version 4.0
Mcafee Epolicy Orchestrator	Version 4.5.0
Mcafee Epolicy Orchestrator	Version 4.5.3
Mcafee Epolicy Orchestrator	Version 4.5.4
Mcafee Epolicy Orchestrator	Version 4.5.5

Configuration B

6 vulnerable

Vulnerable Software	Affected Versions
Mcafee Epolicy Orchestrator	Version 4.6.0
Mcafee Epolicy Orchestrator	Version 4.6.1
Mcafee Epolicy Orchestrator	Version 4.6.2
Mcafee Epolicy Orchestrator	Version 4.6.3
Mcafee Epolicy Orchestrator	Version 4.6.4
Mcafee Epolicy Orchestrator	Version 4.6.5