Vulnerability-Lookup

CVE-2006-5273 (GCVE-0-2006-5273)

Vulnerability from cvelistv5 – Published: 2007-07-12 00:00 – Updated: 2024-08-07 19:41

Summary

Heap-based buffer overflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent (CMA) 3.5.5.438 through 3.6.0.453 allows remote attackers to execute arbitrary code via a crafted packet.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

9 references

URL	Tags
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://www.vupen.com/english/advisories/2007/2498	vdb-entryx_refsource_VUPEN
http://www.securitytracker.com/id?1018363	vdb-entryx_refsource_SECTRACK
http://secunia.com/advisories/26029	third-party-advisoryx_refsource_SECUNIA
http://www.nessus.org/plugins/index.php?view=sing…	x_refsource_MISC
http://www.osvdb.org/36100	vdb-entryx_refsource_OSVDB
http://www.iss.net/threats/269.html	third-party-advisoryx_refsource_ISS
https://knowledge.mcafee.com/article/763/613366_f…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/24863	vdb-entryx_refsource_BID

Date Public

2007-07-10 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T19:41:05.351Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "security-management-bo(31164)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31164"
          },
          {
            "name": "ADV-2007-2498",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/2498"
          },
          {
            "name": "1018363",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1018363"
          },
          {
            "name": "26029",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26029"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.nessus.org/plugins/index.php?view=single\u0026id=25702"
          },
          {
            "name": "36100",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/36100"
          },
          {
            "name": "20070710 McAfee ePolicy Orchestrator Agent Remote Code Execution",
            "tags": [
              "third-party-advisory",
              "x_refsource_ISS",
              "x_transferred"
            ],
            "url": "http://www.iss.net/threats/269.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://knowledge.mcafee.com/article/763/613366_f.SAL_Public.html"
          },
          {
            "name": "24863",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/24863"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-07-10T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent (CMA) 3.5.5.438 through 3.6.0.453 allows remote attackers to execute arbitrary code via a crafted packet."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-19T15:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "security-management-bo(31164)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31164"
        },
        {
          "name": "ADV-2007-2498",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/2498"
        },
        {
          "name": "1018363",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1018363"
        },
        {
          "name": "26029",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26029"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.nessus.org/plugins/index.php?view=single\u0026id=25702"
        },
        {
          "name": "36100",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/36100"
        },
        {
          "name": "20070710 McAfee ePolicy Orchestrator Agent Remote Code Execution",
          "tags": [
            "third-party-advisory",
            "x_refsource_ISS"
          ],
          "url": "http://www.iss.net/threats/269.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://knowledge.mcafee.com/article/763/613366_f.SAL_Public.html"
        },
        {
          "name": "24863",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/24863"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-5273",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Heap-based buffer overflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent (CMA) 3.5.5.438 through 3.6.0.453 allows remote attackers to execute arbitrary code via a crafted packet."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "security-management-bo(31164)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31164"
            },
            {
              "name": "ADV-2007-2498",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/2498"
            },
            {
              "name": "1018363",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1018363"
            },
            {
              "name": "26029",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26029"
            },
            {
              "name": "http://www.nessus.org/plugins/index.php?view=single\u0026id=25702",
              "refsource": "MISC",
              "url": "http://www.nessus.org/plugins/index.php?view=single\u0026id=25702"
            },
            {
              "name": "36100",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/36100"
            },
            {
              "name": "20070710 McAfee ePolicy Orchestrator Agent Remote Code Execution",
              "refsource": "ISS",
              "url": "http://www.iss.net/threats/269.html"
            },
            {
              "name": "https://knowledge.mcafee.com/article/763/613366_f.SAL_Public.html",
              "refsource": "CONFIRM",
              "url": "https://knowledge.mcafee.com/article/763/613366_f.SAL_Public.html"
            },
            {
              "name": "24863",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/24863"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-5273",
    "datePublished": "2007-07-12T00:00:00.000Z",
    "dateReserved": "2006-10-13T00:00:00.000Z",
    "dateUpdated": "2024-08-07T19:41:05.351Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2006-5273",
      "date": "2026-09-22",
      "epss": "0.06329",
      "percentile": "0.9331"
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:mcafee:common_management_agent:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "5DC8D591-39A8-4B86-9801-FE25E13878DC",
                    "versionEndIncluding": "3.6.0.453",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:mcafee:common_management_agent:3.6.0.438:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C5A9ECA8-BE32-4A05-9E65-3C8F8A34227D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:mcafee:e-business_server:3.5:*:*:*:*:*:*:*",
                    "matchCriteriaId": "5AA04BD6-C46B-4BD9-84A5-D56963D24FDC",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:mcafee:e-business_server:3.6.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "737354DF-F5B6-49BA-9428-59DAFFF22942",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:mcafee:protectionpilot:1.1.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D66F27F5-43A8-4E22-B1E4-D5C3261E4BA3",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:mcafee:protectionpilot:1.1.1:p3:*:*:*:*:*:*",
                    "matchCriteriaId": "340AF637-E84E-4326-8390-8055CFF1F76C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:mcafee:protectionpilot:1.5.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "EFCC653E-637A-41E8-95A6-ADBA7499CB96",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Heap-based buffer overflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent (CMA) 3.5.5.438 through 3.6.0.453 allows remote attackers to execute arbitrary code via a crafted packet."
          },
          {
            "lang": "es",
            "value": "Desbordamiento de b\u00fafer basado en pila en McAfee ePolicy Orchestrator 3.5 hasta 3.6.1, ProtectionPilot 1.1.1 y 1.5, y Common Management Agent (CMA) 3.5.5.438 hasta 3.6.0.453 permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n mediante un paquete artesanal."
          }
        ],
        "id": "CVE-2006-5273",
        "lastModified": "2026-04-23T00:35:47.467",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "HIGH",
              "cvssData": {
                "accessComplexity": "HIGH",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "COMPLETE",
                "baseScore": 7.6,
                "confidentialityImpact": "COMPLETE",
                "integrityImpact": "COMPLETE",
                "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C",
                "version": "2.0"
              },
              "exploitabilityScore": 4.9,
              "impactScore": 10.0,
              "obtainAllPrivilege": true,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ]
        },
        "published": "2007-07-12T00:30:00.000",
        "references": [
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/26029"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.iss.net/threats/269.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.nessus.org/plugins/index.php?view=single\u0026id=25702"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.osvdb.org/36100"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securityfocus.com/bid/24863"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securitytracker.com/id?1018363"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.vupen.com/english/advisories/2007/2498"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31164"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Patch"
            ],
            "url": "https://knowledge.mcafee.com/article/763/613366_f.SAL_Public.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/26029"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.iss.net/threats/269.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.nessus.org/plugins/index.php?view=single\u0026id=25702"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.osvdb.org/36100"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/bid/24863"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securitytracker.com/id?1018363"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.vupen.com/english/advisories/2007/2498"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31164"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch"
            ],
            "url": "https://knowledge.mcafee.com/article/763/613366_f.SAL_Public.html"
          }
        ],
        "sourceIdentifier": "cve@mitre.org",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "NVD-CWE-Other"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    }
  }
}

CERTA-2007-AVI-297

Vulnerability from certfr_avis - Published: 2007-07-11 - Updated: 2007-07-11

Plusieurs vulnérabilités affectent le module Common Management Agent des produits McAfee ePolicy Orchestrator et Protection Pilot et peuvent etre utilisées par un utilisateur malveillant pour exécuter du code arbitraire à distance.

Description

Plusieurs vulnérabilités du type dépassement de pile et corruption mémoire affectent le module Common Management Agent des produits McAfee ePolicy Orchestrator et Protection Pilot. Elles peuvent être utilisées par un utilisateur malveillant pour exécuter du code arbitraire à distance et provoquer des dénis de service.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Les versions antérieures à McAfee Common Management Agent 3.6.0 Patch 1 (CMA3.6.0.546).

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

FKIE_CVE-2006-5273

Vulnerability from fkie_nvd - Published: 2007-07-12 00:30 - Updated: 2026-06-16 22:30

Severity

Summary

References

URL	Tags
cve@mitre.org	http://secunia.com/advisories/26029	Vendor Advisory
cve@mitre.org	http://www.iss.net/threats/269.html
cve@mitre.org	http://www.nessus.org/plugins/index.php?view=single&id=25702
cve@mitre.org	http://www.osvdb.org/36100
cve@mitre.org	http://www.securityfocus.com/bid/24863
cve@mitre.org	http://www.securitytracker.com/id?1018363
cve@mitre.org	http://www.vupen.com/english/advisories/2007/2498
cve@mitre.org	https://exchange.xforce.ibmcloud.com/vulnerabilities/31164
cve@mitre.org	https://knowledge.mcafee.com/article/763/613366_f.SAL_Public.html	Patch
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/26029	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.iss.net/threats/269.html
af854a3a-2127-422b-91ae-364da2661108	http://www.nessus.org/plugins/index.php?view=single&id=25702
af854a3a-2127-422b-91ae-364da2661108	http://www.osvdb.org/36100
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/24863
af854a3a-2127-422b-91ae-364da2661108	http://www.securitytracker.com/id?1018363
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2007/2498
af854a3a-2127-422b-91ae-364da2661108	https://exchange.xforce.ibmcloud.com/vulnerabilities/31164
af854a3a-2127-422b-91ae-364da2661108	https://knowledge.mcafee.com/article/763/613366_f.SAL_Public.html	Patch

Impacted products

Vendor	Product	Version
mcafee	common_management_agent	*
mcafee	common_management_agent	3.6.0.438
mcafee	e-business_server	3.5
mcafee	e-business_server	3.6.1
mcafee	protectionpilot	1.1.1
mcafee	protectionpilot	1.1.1
mcafee	protectionpilot	1.5.0

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:mcafee:common_management_agent:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "5DC8D591-39A8-4B86-9801-FE25E13878DC",
              "versionEndIncluding": "3.6.0.453",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mcafee:common_management_agent:3.6.0.438:*:*:*:*:*:*:*",
              "matchCriteriaId": "C5A9ECA8-BE32-4A05-9E65-3C8F8A34227D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mcafee:e-business_server:3.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "5AA04BD6-C46B-4BD9-84A5-D56963D24FDC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mcafee:e-business_server:3.6.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "737354DF-F5B6-49BA-9428-59DAFFF22942",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mcafee:protectionpilot:1.1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "D66F27F5-43A8-4E22-B1E4-D5C3261E4BA3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mcafee:protectionpilot:1.1.1:p3:*:*:*:*:*:*",
              "matchCriteriaId": "340AF637-E84E-4326-8390-8055CFF1F76C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mcafee:protectionpilot:1.5.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "EFCC653E-637A-41E8-95A6-ADBA7499CB96",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Heap-based buffer overflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent (CMA) 3.5.5.438 through 3.6.0.453 allows remote attackers to execute arbitrary code via a crafted packet."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de b\u00fafer basado en pila en McAfee ePolicy Orchestrator 3.5 hasta 3.6.1, ProtectionPilot 1.1.1 y 1.5, y Common Management Agent (CMA) 3.5.5.438 hasta 3.6.0.453 permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n mediante un paquete artesanal."
    }
  ],
  "id": "CVE-2006-5273",
  "lastModified": "2026-06-16T22:30:52.507",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "HIGH",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 7.6,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 4.9,
        "impactScore": 10.0,
        "obtainAllPrivilege": true,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2007-07-12T00:30:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/26029"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.iss.net/threats/269.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.nessus.org/plugins/index.php?view=single\u0026id=25702"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/36100"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/24863"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securitytracker.com/id?1018363"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2007/2498"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31164"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "https://knowledge.mcafee.com/article/763/613366_f.SAL_Public.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/26029"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.iss.net/threats/269.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.nessus.org/plugins/index.php?view=single\u0026id=25702"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/36100"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/24863"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id?1018363"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2007/2498"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31164"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "https://knowledge.mcafee.com/article/763/613366_f.SAL_Public.html"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-CMCQ-56R6-CXH7

Vulnerability from github – Published: 2022-05-01 07:26 – Updated: 2022-05-01 07:26

Details

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2006-5273"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2007-07-12T00:30:00Z",
    "severity": "HIGH"
  },
  "details": "Heap-based buffer overflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent (CMA) 3.5.5.438 through 3.6.0.453 allows remote attackers to execute arbitrary code via a crafted packet.",
  "id": "GHSA-cmcq-56r6-cxh7",
  "modified": "2022-05-01T07:26:42Z",
  "published": "2022-05-01T07:26:42Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-5273"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31164"
    },
    {
      "type": "WEB",
      "url": "https://knowledge.mcafee.com/article/763/613366_f.SAL_Public.html"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/26029"
    },
    {
      "type": "WEB",
      "url": "http://www.iss.net/threats/269.html"
    },
    {
      "type": "WEB",
      "url": "http://www.nessus.org/plugins/index.php?view=single\u0026id=25702"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/36100"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/24863"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id?1018363"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2007/2498"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2006-5273

Vulnerability from gsd - Updated: 2023-12-13 01:19

Details

Aliases

CVE-2006-5273

Aliases

CVE-2006-5273

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2006-5273",
    "description": "Heap-based buffer overflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent (CMA) 3.5.5.438 through 3.6.0.453 allows remote attackers to execute arbitrary code via a crafted packet.",
    "id": "GSD-2006-5273"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2006-5273"
      ],
      "details": "Heap-based buffer overflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent (CMA) 3.5.5.438 through 3.6.0.453 allows remote attackers to execute arbitrary code via a crafted packet.",
      "id": "GSD-2006-5273",
      "modified": "2023-12-13T01:19:56.110614Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2006-5273",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Heap-based buffer overflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent (CMA) 3.5.5.438 through 3.6.0.453 allows remote attackers to execute arbitrary code via a crafted packet."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "security-management-bo(31164)",
            "refsource": "XF",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31164"
          },
          {
            "name": "ADV-2007-2498",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2007/2498"
          },
          {
            "name": "1018363",
            "refsource": "SECTRACK",
            "url": "http://www.securitytracker.com/id?1018363"
          },
          {
            "name": "26029",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/26029"
          },
          {
            "name": "http://www.nessus.org/plugins/index.php?view=single\u0026id=25702",
            "refsource": "MISC",
            "url": "http://www.nessus.org/plugins/index.php?view=single\u0026id=25702"
          },
          {
            "name": "36100",
            "refsource": "OSVDB",
            "url": "http://www.osvdb.org/36100"
          },
          {
            "name": "20070710 McAfee ePolicy Orchestrator Agent Remote Code Execution",
            "refsource": "ISS",
            "url": "http://www.iss.net/threats/269.html"
          },
          {
            "name": "https://knowledge.mcafee.com/article/763/613366_f.SAL_Public.html",
            "refsource": "CONFIRM",
            "url": "https://knowledge.mcafee.com/article/763/613366_f.SAL_Public.html"
          },
          {
            "name": "24863",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/24863"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:mcafee:protectionpilot:1.1.1:p3:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mcafee:protectionpilot:1.5.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mcafee:common_management_agent:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "3.6.0.453",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mcafee:common_management_agent:3.6.0.438:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mcafee:e-business_server:3.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mcafee:e-business_server:3.6.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mcafee:protectionpilot:1.1.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-5273"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Heap-based buffer overflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent (CMA) 3.5.5.438 through 3.6.0.453 allows remote attackers to execute arbitrary code via a crafted packet."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "NVD-CWE-Other"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20070710 McAfee ePolicy Orchestrator Agent Remote Code Execution",
              "refsource": "ISS",
              "tags": [],
              "url": "http://www.iss.net/threats/269.html"
            },
            {
              "name": "https://knowledge.mcafee.com/article/763/613366_f.SAL_Public.html",
              "refsource": "CONFIRM",
              "tags": [
                "Patch"
              ],
              "url": "https://knowledge.mcafee.com/article/763/613366_f.SAL_Public.html"
            },
            {
              "name": "26029",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/26029"
            },
            {
              "name": "http://www.nessus.org/plugins/index.php?view=single\u0026id=25702",
              "refsource": "MISC",
              "tags": [],
              "url": "http://www.nessus.org/plugins/index.php?view=single\u0026id=25702"
            },
            {
              "name": "24863",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/24863"
            },
            {
              "name": "36100",
              "refsource": "OSVDB",
              "tags": [],
              "url": "http://www.osvdb.org/36100"
            },
            {
              "name": "1018363",
              "refsource": "SECTRACK",
              "tags": [],
              "url": "http://www.securitytracker.com/id?1018363"
            },
            {
              "name": "ADV-2007-2498",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2007/2498"
            },
            {
              "name": "security-management-bo(31164)",
              "refsource": "XF",
              "tags": [],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31164"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.6,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 4.9,
          "impactScore": 10.0,
          "obtainAllPrivilege": true,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2017-07-20T01:33Z",
      "publishedDate": "2007-07-12T00:30Z"
    }
  }
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2006-5273 (GCVE-0-2006-5273)

CERTA-2007-AVI-297

Description

Solution

FKIE_CVE-2006-5273

GHSA-CMCQ-56R6-CXH7

GSD-2006-5273

Tags

Sightings

Nomenclature

Related by attack behaviour