CVE-2008-1357
- State
- Published
- Severity
- Not scored
- Published
- Mar 17, 2008
- Updated
- Aug 7, 2024
- Reserved
- Mar 17, 2008
Description
Format string vulnerability in the logDetail function of applib.dll in McAfee Common Management Agent (CMA) 3.6.0.574 (Patch 3) and earlier, as used in ePolicy Orchestrator 4.0.0 build 1015, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in a sender field in an AgentWakeup request to UDP port 8082. NOTE: this issue only exists when the debug level is 8.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 3748third-party-advisory
- https://knowledge.mcafee.com/article/234/615103_f.sal_public.html
- mcafee-framework-format-string(41178)vdb-entry
- 1019609vdb-entry
- 29337third-party-advisory
- 28228vdb-entry
- http://aluigi.altervista.org/adv/meccaffi-adv.txt
- ADV-2008-0866vdb-entry
- 20080312 Format string in McAfee Framework 3.6.0.569 (ePolicy Orchestrator 4.0)mailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.