CVEs-PoC/2006/CVE-2006-5156.md

CVE-2006-5156

Description

Buffer overflow in McAfee ePolicy Orchestrator before 3.5.0.720 and ProtectionPilot before 1.1.1.126 allows remote attackers to execute arbitrary code via a request to /spipe/pkg/ with a long source header.

POC

Reference

• http://knowledge.mcafee.com/SupportSite/search.do?cmd=displayKC&docType=kc&externalId=8611438&sliceId=SAL_Public&dialogID=2997768&stateId=0%200%202995803
• http://knowledge.mcafee.com/article/365/8611438_f.SAL_Public.html

Github

• https://github.com/trend-anz/Deep-Security-CVE-to-IPS-Mapper