CVE-2008-1357: Medium severity mcafee agent vulnerability
Format string vulnerability in the logDetail function of applib.dll in McAfee Common Management Agent (CMA) 3.6.0.574 (Patch 3) and earlier, as used in ePolicy Orchestrator 4.0.0 build 1015, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in a sender field in an AgentWakeup request to UDP port 8082. NOTE: this issue only exists when the debug level is 8.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-1357?
CVE-2008-1357 is considered to have a high severity due to the potential for remote attackers to execute arbitrary code or cause a denial of service.
How do I fix CVE-2008-1357?
To fix CVE-2008-1357, you should upgrade to the latest version of McAfee Common Management Agent or apply any relevant patches provided by McAfee.
Which software is affected by CVE-2008-1357?
CVE-2008-1357 affects multiple versions of McAfee Common Management Agent and Trellix ePolicy Orchestrator.
Can CVE-2008-1357 lead to unauthorized access?
Yes, CVE-2008-1357 can potentially allow remote attackers to execute arbitrary code, which may lead to unauthorized access.
What type of vulnerability is CVE-2008-1357 classified as?
CVE-2008-1357 is classified as a format string vulnerability.