CVE-2006-5272: mcafee common_management_agent

EPSS trend

Probability

3.56%

Chance of exploitation in the next 30 days

Percentile

89%

Versus all other CVEs

30-day change

0.00 pp

From 3.56% on 18-09-2026

18-09-202618-10-2026

EPSS score

3.56%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

8 links

www.vupen.com/english/advisories/2007/2498VDB EntryX Refsource VUPEN
knowledge.mcafee.com/article/762/613365_f.SAL_Public.htmlX Refsource CONFIRM
exchange.xforce.ibmcloud.com/vulnerabilities/31163VDB EntryX Refsource XF
www.securitytracker.com/id?1018363VDB EntryX Refsource SECTRACK
www.osvdb.org/36099VDB EntryX Refsource OSVDB
secunia.com/advisories/26029Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.iss.net/threats/269.htmlThird Party AdvisoryX Refsource ISS
www.securityfocus.com/bid/24863VDB EntryX Refsource BID

Related vulnerabilities

CVE-2007-2151mcafeee-business_server1.86%19y ago19-04-2007 10:00The administration server in McAfee e-Business Server before 8.1.1 and 8.5.x before 8.5.2 allows remote attackers to cause a denial of service (service crash) via a large length value in a malformed authentication packet, which triggers a heap over-read.CVE-2007-2957mcafeee-business_server6.22%18y ago31-10-2007 22:00Integer overflow in McAfee E-Business Server before 8.5.3 for Solaris, and before 8.1.2 for Linux, HP-UX, and AIX, allows remote attackers to execute arbitrary code via a large length value in an authentication packet, which results in a heap-based buffer overflow.CVE-2007-1498mcafeeepolicy_orchestrator+17.79%19y ago16-03-2007 22:00Multiple stack-based buffer overflows in the SiteManager.SiteMgr.1 ActiveX control (SiteManager.dll) in the ePO management console in McAfee ePolicy Orchestrator (ePO) before 3.6.1 Patch 1 and ProtectionPilot (PRP) before 1.5.0 HotFix allow remote attackers to execute arbitrary code via a long argument to the (1) ExportSiteList and (2) VerifyPackageCatalog functions, and (3) unspecified vectors involving a swprintf function call.CVE-2005-4505mcafeecommon_management_agent+10.99%20y ago23-12-2005 00:00Unquoted Windows search path vulnerability in McAfee VirusScan Enterprise 8.0i (patch 11) and CMA 3.5 (patch 5) might allow local users to gain privileges via a malicious "program.exe" file in the C: folder, which is run by naPrdMgr.exe when it attempts to execute EntVUtil.EXE under an unquoted "Program Files" path.CVE-2008-0127mcafeee-business_server8.56%18y ago10-01-2008 00:00The administration interface in McAfee E-Business Server 8.5.2 and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a long initial authentication packet.CVE-2009-5115mcafeecommon_management_agent1.07%14y ago22-08-2012 10:00McAfee Common Management Agent (CMA) 3.5.5 through 3.5.5.588 and 3.6.0 through 3.6.0.608, and McAfee Agent 4.0 before Patch 3, allows remote authenticated users to overwrite arbitrary files by accessing a report-writing ActiveX control COM object.

All vulnerabilities incommon_management_agent e-business_server protectionpilot

CVE-2006-5272: mcafee common_management_agent

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References