McAfee ePolicy Orchestrator ActiveX Exploit

This module exploits a vulnerability in SiteManager ActiveX Control (sitemanager.dll). When the ExportSiteList() method process a long string argument, a stack based buffer overflow occurs. This module runs a web server waiting for vulnerable clients (Internet Explorer) to connect to it. When the client connects, it will try to install an agent by exploiting this vulnerability.