CVE-2006-5271: McAfee E-Business Server

High severity, CVSS 7.6. EPSS: 4% chance of exploitation in the next 30 days.

Integer underflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent (CMA) 3.6.0.453 and earlier allows remote attackers to execute arbitrary code via a crafted UDP packet, which causes stack corruption.

Affected products

• McAfee E-Business Server: version 3.5 only; version 3.6.1 only
• McAfee Protectionpilot: version 1.1.1 only; version 1.5.0 only

Published 2007-07-12. Last modified 2026-06-16.