CVE-2002-0690: Critical severity McAfee ePolicy Orchestrator vulnerability
Published Mar 18, 2003
·Updated
Format string vulnerability in McAfee Security ePolicy Orchestrator (ePO) 2.5.1 allows remote attackers to execute arbitrary code via an HTTP GET request with a URI containing format strings.
Affected Software
1 affected component
McAfee ePolicy Orchestrator=2.5.1
Remediation
Patch Available
Event History
Mar 18, 2003
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-0690?
CVE-2002-0690 has a high severity rating due to the potential for remote code execution.
2
How is CVE-2002-0690 exploited?
CVE-2002-0690 can be exploited via an HTTP GET request with a URI that contains format strings.
3
Which version of McAfee ePolicy Orchestrator is affected by CVE-2002-0690?
CVE-2002-0690 specifically affects McAfee Security ePolicy Orchestrator version 2.5.1.
4
How do I fix CVE-2002-0690?
To fix CVE-2002-0690, upgrade to a version of McAfee ePolicy Orchestrator that is not vulnerable.
5
What are the risks associated with CVE-2002-0690?
The risks associated with CVE-2002-0690 include unauthorized remote code execution and potential system compromise.