HTTP: McAfee Policy Manager naPolicyManager.dll Unsafe ActiveX Method

This signature detects attempts to use unsafe ActiveX controls in McAfee Policy Manager. An attacker can create a malicious Web site containing Web pages with dangerous ActiveX controls, which if accessed by a victim, allows the attacker to overwrite files on the victim's system.

Extended Description

McAfee Policy Manager is prone to a vulnerability that lets attackers overwrite files with arbitrary, attacker-controlled content. An attacker can exploit this issue to corrupt or overwrite arbitrary '.ini' files on a victim's computer in the context of the application using the ActiveX control (typically Internet Explorer). Given the nature of this issue, the attacker may also be able to run arbitrary code, but this has not been confirmed.

Affected Products

Mcafee policy_manager

References

BugTraq: 35404

Short Name

HTTP:STC:ACTIVEX:MCFE-OVERWRITE

Severity

Minor

Recommended

False

Recommended Action

None

HTTP: McAfee Policy Manager naPolicyManager.dll Unsafe ActiveX Method

Extended Description

Affected Products

References

Found a potential security threat?