CVE-2008-1357
First published: Mon Mar 17 2008(Updated: )
Format string vulnerability in the logDetail function of applib.dll in McAfee Common Management Agent (CMA) 3.6.0.574 (Patch 3) and earlier, as used in ePolicy Orchestrator 4.0.0 build 1015, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in a sender field in an AgentWakeup request to UDP port 8082. NOTE: this issue only exists when the debug level is 8.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mcafee Agent | =4.0 | |
| Mcafee Cma | =3.0.6.453 | |
| Mcafee Cma | =3.5.5.438 | |
| Mcafee Cma | =3.6.438 | |
| Mcafee Cma | =3.6.453 | |
| Mcafee Cma | =3.6.546 | |
| Mcafee Cma | =3.6.574 | |
| McAfee ePolicy Orchestrator | =4.0 | |
| Mcafee Mcafee Framework | =3.6.569 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://aluigi.altervista.org/adv/meccaffi-adv.txt
- http://secunia.com/advisories/29337
- http://securityreason.com/securityalert/3748
- http://www.securityfocus.com/archive/1/489476/100/0/threaded
- http://www.securityfocus.com/bid/28228
- http://www.securitytracker.com/id?1019609
- http://www.vupen.com/english/advisories/2008/0866/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41178
- https://knowledge.mcafee.com/article/234/615103_f.sal_public.html
- collector/nvd-index
- collector/nvd-historical
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/first-publish-date
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/mcafee
- canonical/mcafee agent
- version/mcafee agent/4.0
- canonical/mcafee cma
- version/mcafee cma/3.0.6.453
- version/mcafee cma/3.5.5.438
- version/mcafee cma/3.6.438
- version/mcafee cma/3.6.453
- version/mcafee cma/3.6.546
- version/mcafee cma/3.6.574
- canonical/mcafee epolicy orchestrator
- version/mcafee epolicy orchestrator/4.0
- canonical/mcafee mcafee framework
- version/mcafee mcafee framework/3.6.569