Signature Detail

HTTP: McAfee Policy Manager naPolicyManager.dll Unsafe ActiveX Method

This signature detects attempts to use unsafe ActiveX controls in McAfee Policy Manager. An attacker can create a malicious Web site containing Web pages with dangerous ActiveX controls, which if accessed by a victim, allows the attacker to overwrite files on the victim's system.

Extended Description

McAfee Policy Manager is prone to a vulnerability that lets attackers overwrite files with arbitrary, attacker-controlled content. An attacker can exploit this issue to corrupt or overwrite arbitrary '.ini' files on a victim's computer in the context of the application using the ActiveX control (typically Internet Explorer). Given the nature of this issue, the attacker may also be able to run arbitrary code, but this has not been confirmed.

Affected Products

• McAfee Policy Manager

References

• BugTraq: 35404