Format string vulnerability in the logDetail function of applib.dll in...
Vulnerability Description
Format string vulnerability in the logDetail function of applib.dll in McAfee Common Management Agent (CMA) 3.6.0.574 (Patch 3) and earlier, as used in ePolicy Orchestrator 4.0.0 build 1015, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in a sender field in an AgentWakeup request to UDP port 8082. NOTE: this issue only exists when the debug level is 8.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-1357
Credits & Attribution
No credits recorded in the NVD database.
References
- http://securityreason.com/securityalert/3748
- https://knowledge.mcafee.com/article/234/615103_f.sal_public.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41178
- http://www.securitytracker.com/id?1019609
- http://secunia.com/advisories/29337
- http://www.securityfocus.com/bid/28228
- http://aluigi.altervista.org/adv/meccaffi-adv.txt
- http://www.vupen.com/english/advisories/2008/0866/references
- http://www.securityfocus.com/archive/1/489476/100/0/threaded
More from mcafee
View All →Affected Vendor
mcafee
View all reports →Affected Software
Timeline
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.