Signature Detail

SSL: McAfee ePolicy CVE-2015-0921 XML Entity Injection

This signature detects an attempt to exploit a known vulnerability against McAfee ePolicy Orchestrator application. Successful exploitation could allow an attacker execute arbitrary codes into the context of the running application which could lead to further attacks.

References

• BugTraq: 71881
• CVE: CVE-2015-0921
• CVE: CVE-2015-0922
• URL: http://seclists.org/fulldisclosure/2015/jan/8
• URL: https://kc.mcafee.com/corporate/index?page=content&id=sb10095&actp=null&viewlocale=en_us&showdraft=false&platinum_status=false&locale=en_u