CVE

Id
24855  
CVE No.
CVE-2007-1498  
Status
Candidate  
Description
Multiple stack-based buffer overflows in the SiteManager.SiteMgr.1 ActiveX control (SiteManager.dll) in the ePO management console in McAfee ePolicy Orchestrator (ePO) before 3.6.1 Patch 1 and ProtectionPilot (PRP) before 1.5.0 HotFix allow remote attackers to execute arbitrary code via a long argument to the (1) ExportSiteList and (2) VerifyPackageCatalog functions, and (3) unspecified vectors involving a swprintf function call.  
Phase
Assigned (20070316)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
246264 24855 CVE-2007-1498 FULLDISC:20070314 [Advisory]McAfee ePolicy Orchestrator Multiple Remote Buffer Overflow Vulnerabilities  View
246265 24855 CVE-2007-1498 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2007-March/052960.html  View
246266 24855 CVE-2007-1498 CONFIRM:https://knowledge.mcafee.com/article/25/612495_f.SAL_Public.html  View
246267 24855 CVE-2007-1498 CONFIRM:https://knowledge.mcafee.com/article/26/612496_f.SAL_Public.html  View
246268 24855 CVE-2007-1498 CERT-VN:VU#714593  View
246269 24855 CVE-2007-1498 URL:http://www.kb.cert.org/vuls/id/714593  View
246270 24855 CVE-2007-1498 BID:22952  View
246271 24855 CVE-2007-1498 URL:http://www.securityfocus.com/bid/22952  View
246272 24855 CVE-2007-1498 VUPEN:ADV-2007-0931  View
246273 24855 CVE-2007-1498 URL:http://www.vupen.com/english/advisories/2007/0931  View
246274 24855 CVE-2007-1498 SECTRACK:1017757  View
246275 24855 CVE-2007-1498 URL:http://www.securitytracker.com/id?1017757  View
246276 24855 CVE-2007-1498 SECUNIA:24466  View
246277 24855 CVE-2007-1498 URL:http://secunia.com/advisories/24466  View
246278 24855 CVE-2007-1498 SREASON:2444  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53018 JVNDB-2007-001710 LSAT における任意のファイルを上書きされる脆弱性 Linux Security Auditing Tool (LSAT) には、任意のファイルを上書きされる脆弱性が存在します。 CVE-2007-1500 24855 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001710.html  View