Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2008-1357
HistoryMar 17, 2008 - 5:44 p.m.

CVE-2008-1357

2008-03-1717:44:00
CWE-134
mitre
web.nvd.nist.gov
34
cve-2008-1357
format string vulnerability
mcafee cma
denial of service
execute arbitrary code
remote attack

CVSS2

5.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:N/I:N/A:C

AI Score

7.7

Confidence

High

EPSS

0.827

Percentile

98.5%

JSON

Format string vulnerability in the logDetail function of applib.dll in McAfee Common Management Agent (CMA) 3.6.0.574 (Patch 3) and earlier, as used in ePolicy Orchestrator 4.0.0 build 1015, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in a sender field in an AgentWakeup request to UDP port 8082. NOTE: this issue only exists when the debug level is 8.

Affected configurations

Nvd
Node
mcafeeagentMatch4.0
OR
mcafeecmaMatch3.0.6.453
OR
mcafeecmaMatch3.5.5.438
OR
mcafeecmaMatch3.6.438
OR
mcafeecmaMatch3.6.453
OR
mcafeecmaMatch3.6.546
OR
mcafeecmaMatch3.6.574
OR
mcafeeepolicy_orchestratorMatch4.0
OR
mcafeemcafee_frameworkMatch3.6.569
VendorProductVersionCPE
mcafeeagent4.0cpe:2.3:a:mcafee:agent:4.0:*:*:*:*:*:*:*
mcafeecma3.0.6.453cpe:2.3:a:mcafee:cma:3.0.6.453:*:*:*:*:*:*:*
mcafeecma3.5.5.438cpe:2.3:a:mcafee:cma:3.5.5.438:*:*:*:*:*:*:*
mcafeecma3.6.438cpe:2.3:a:mcafee:cma:3.6.438:*:*:*:*:*:*:*
mcafeecma3.6.453cpe:2.3:a:mcafee:cma:3.6.453:*:*:*:*:*:*:*
mcafeecma3.6.546cpe:2.3:a:mcafee:cma:3.6.546:*:*:*:*:*:*:*
mcafeecma3.6.574cpe:2.3:a:mcafee:cma:3.6.574:*:*:*:*:*:*:*
mcafeeepolicy_orchestrator4.0cpe:2.3:a:mcafee:epolicy_orchestrator:4.0:*:*:*:*:*:*:*
mcafeemcafee_framework3.6.569cpe:2.3:a:mcafee:mcafee_framework:3.6.569:*:*:*:*:*:*:*

Related

nessus 2
checkpoint_advisories 1
exploitdb 1
cvelist 1
prion 1
nvd 1
nessus
nessus
McAfee Common Management Agent < 3.6.0.595 UDP Packet Handling Format String
2008-04-03 00:00:00
McAfee Common Management Agent 3.6.0 UDP Packet Handling Format String (credentialed check)
2008-04-03 00:00:00
checkpoint_advisories
checkpoint_advisories
McAfee ePolicy Orchestrator Framework Services Log Handling Format String (CVE-2008-1357)
2010-02-09 00:00:00
exploitdb
exploitdb
McAfee Framework ePolicy 3.x - Orchestrator &#039;_naimcomn_Log&#039; Remote Format String
2008-03-12 00:00:00
cvelist
cvelist
CVE-2008-1357
2008-03-17 17:00:00
prion
prion
Format string
2008-03-17 17:44:00
nvd
nvd
CVE-2008-1357
2008-03-17 17:44:00

CVSS2

5.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:N/I:N/A:C

AI Score

7.7

Confidence

High

EPSS

0.827

Percentile

98.5%

JSON
Related for CVE-2008-1357
nessus2checkpoint_advisories1exploitdb1cvelist1prion1nvd1