NVD

Id
9704  
Name
CVE-2011-3007  
Description
The myCIOScn ActiveX control (myCIOScn.dll) in McAfee SaaS Endpoint Protection 5.2.1 and earlier allows remote attackers to write to arbitrary files by specifying an arbitrary filename in the MyCioScan.Scan.ReportFile parameter, as demonstrated by injecting script into a log file and executing arbitrary code using the MyCioScan.Scan.Start method.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-08-10  
Modified Date
2011-09-06  
Seq
2011-3007  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
55560 9704 CVE-2011-3007 http://dvlabs.tippingpoint.com/advisory/TPTI-11-13  View
55561 9704 CVE-2011-3007 mcafee-saas-mycioscn-code-execution(69093)  View
55562 9704 CVE-2011-3007 https://kc.mcafee.com/corporate/index?page=content&id=SB10016  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34603 JVNDB-2011-004845 McAfee SaaS Endpoint Protection の myCIOScn.dll における任意のファイルを書かれる脆弱性 McAfee SaaS Endpoint Protection の myCIOScn ActiveX コントロール (myCIOScn.dll) には、任意のファイルを書き込みされる脆弱性が存在します。 CVE-2011-3007 50914 CVE-2011-3007 9704 6.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004845.html 2011-08-10 2012-03-27 View