CVE-2009-3566

McAfee IntruShield Network Security Manager < 5.1.11.8.1 - Cross-Site Scripting via Session Cookie

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2009-3566. PoCs published by Daniel King.

AI-analyzed exploit summary This exploit demonstrates an XSS vulnerability in McAfee Network Security Manager due to lack of HTTPOnly protection on cookies. The PoC injects a script to exfiltrate cookie-based authentication credentials to an attacker-controlled server.

Description

McAfee IntruShield Network Security Manager (NSM) before 5.1.11.8.1 does not include the HTTPOnly flag in the Set-Cookie header for the session identifier, which allows remote attackers to hijack a session by leveraging a cross-site scripting (XSS) vulnerability.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Daniel King · textwebappsjsp

https://www.exploit-db.com/exploits/33347

View Code ZIP pw:eip

This exploit demonstrates an XSS vulnerability in McAfee Network Security Manager due to lack of HTTPOnly protection on cookies. The PoC injects a script to exfiltrate cookie-based authentication credentials to an attacker-controlled server.

Classification

Working Poc 90%

Attack Type

Xss

Complexity

Trivial

Reliability

Reliable

Target: McAfee Network Security Manager 5.1.7.7

No auth needed

Prerequisites: Victim must visit a crafted URL

MITRE ATT&CK