Network Associates vulnerabilities
23 vulnerabilities
Known vulnerabilities in Network Associates products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 11 products.
Products
11- Net Tools Pki Server5 vulnerabilities
- Webshield Smtp5 vulnerabilities
- Sniffer Agent4 vulnerabilities
- Gauntlet Firewall3 vulnerabilities
- Webshield3 vulnerabilities
- Virusscan2 vulnerabilities
- Epolicy Orchestrator Agent1 vulnerabilities
- Mcafee E Ppliance1 vulnerabilities
- Netshield1 vulnerabilities
- Pgp Freeware1 vulnerabilities
- Webshield E Ppliance1 vulnerabilities
CVE-2001-1542network_associateswebshield_smtp
EPSS score2.82%
NAI WebShield SMTP 4.5 and possibly 4.5 MR1a does not filter improperly MIME encoded email attachments, which could allow remote attackers to bypass filtering and possibly execute arbitrary code in email clients that process the invalid attachments.CVE-2001-1456mcafeewebshield_smtp+4EPSS score5.65%
Buffer overflow in the (1) smap/smapd and (2) CSMAP daemons for Gauntlet Firewall 5.0 through 6.0 allows remote attackers to execute arbitrary code via a crafted mail message.CVE-2005-2554network_associatesepolicy_orchestrator_agentEPSS score0.48%
The web server for Network Associates ePolicy Orchestrator Agent 3.5.0 (patch 3) uses insecure permissions for the "Common Framework\Db" folder, which allows local users to read arbitrary files by creating a subfolder in the EPO agent web root directory.CVE-2000-1129network_associateswebshield_smtpEPSS score2.48%
McAfee WebShield SMTP 4.5 allows remote attackers to cause a denial of service via a malformed recipient field.CVE-2000-1130network_associateswebshield_smtpEPSS score1.51%
McAfee WebShield SMTP 4.5 allows remote attackers to bypass email content filtering rules by including Extended ASCII characters in name of the attachment.CVE-2000-1159network_associatessniffer_agentEPSS score1.55%
NAI Sniffer Agent allows remote attackers to gain privileges on the agent by sniffing the initial UDP authentication packets and spoofing commands.CVE-2000-1157network_associatessniffer_agentEPSS score3.48%
Buffer overflow in NAI Sniffer Agent allows remote attackers to execute arbitrary commands via a long SNMP community name.CVE-2000-1158network_associatessniffer_agentEPSS score1.31%
NAI Sniffer Agent uses base64 encoding for authentication, which allows attackers to sniff the network and easily decrypt usernames and passwords.CVE-2000-1160network_associatessniffer_agentEPSS score1.33%
NAI Sniffer Agent allows remote attackers to cause a denial of service (crash) by sending a large number of login requests.CVE-2000-0529network_associatesnet_tools_pki_serverEPSS score1.68%
Net Tools PKI Server allows remote attackers to cause a denial of service via a long HTTP request.CVE-2000-0650network_associatesnetshield+1EPSS score0.43%
The default installation of VirusScan 4.5 and NetShield 4.5 has insecure permissions for the registry key that identifies the AutoUpgrade directory, which allows local users to execute arbitrary commands by replacing SETUP.EXE in that directory with a Trojan Horse.CVE-2000-0739network_associatesnet_tools_pki_serverEPSS score2.87%
Directory traversal vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to read arbitrary files via a .. (dot dot) attack in an HTTPS request to the enrollment server.CVE-2000-0447network_associateswebshieldEPSS score3.52%
Buffer overflow in WebShield SMTP 4.5.44 allows remote attackers to execute arbitrary commands via a long configuration parameter to the WebShield remote management service.CVE-2000-0448network_associateswebshieldEPSS score2.36%
The WebShield SMTP Management Tool version 4.5.44 does not properly restrict access to the management port when an IP address does not resolve to a hostname, which allows remote attackers to access the configuration via the GET_CONFIG command.CVE-2000-0528network_associatesnet_tools_pki_serverEPSS score1.62%
Net Tools PKI Server does not properly restrict access to remote attackers when the XUDA template files do not contain absolute pathnames for other files.CVE-2000-0741network_associatesnet_tools_pki_serverEPSS score5.20%
Format string vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to execute arbitrary code via format strings in a URL with a .XUDA extension.CVE-2000-0740network_associatesnet_tools_pki_serverEPSS score4.69%
Buffer overflow in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to execute arbitrary commands via a long URL in the HTTPS port.CVE-2000-0738network_associateswebshield_smtpEPSS score1.74%
WebShield SMTP 4.5 allows remote attackers to cause a denial of service by sending e-mail with a From: address that has a . (period) at the end, which causes WebShield to continuously send itself copies of the e-mail.CVE-2000-0437network_associatesgauntlet_firewall+2EPSS score5.86%
Buffer overflow in the CyberPatrol daemon "cyberdaemon" used in gauntlet and WebShield allows remote attackers to cause a denial of service or execute arbitrary commands.CVE-1999-1195network_associatesvirusscanEPSS score1.53%
NAI VirusScan NT 4.0.2 does not properly modify the scan.dat virus definition file during an update via FTP, but it reports that the update was successful, which could cause a system administrator to believe that the definitions have been updated correctly.