Description
Directory traversal vulnerability in Framework Service component in McAfee ePolicy Orchestrator agent 3.5.0.x and earlier allows remote attackers to create arbitrary files via a .. (dot dot) in the directory and filename in a PropsResponse (PackageType) request.
References
- http://www.eeye.com/html/research/advisories/AD20060713.html
- epolicy-epo-directory-traversal(27738) vdb-entry
- 21037 third-party-advisory
- ADV-2006-2796 vdb-entry
- 27158 vdb-entry
- 18979 vdb-entry
- 20060714 EEYE: McAfee ePolicy Orchestrator Remote Compromise mailing-list
- 1016501 vdb-entry