CVE-2006-3623: McAfee Epolicy Orchestrator Agent

Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days.

Directory traversal vulnerability in Framework Service component in McAfee ePolicy Orchestrator agent 3.5.0.x and earlier allows remote attackers to create arbitrary files via a .. (dot dot) in the directory and filename in a PropsResponse (PackageType) request.

Affected products

• McAfee Epolicy Orchestrator Agent: up to and including 3.5.0

Published 2006-07-18. Last modified 2026-06-16.