CVE

Id
31474  
CVE No.
CVE-2008-1357  
Status
Candidate  
Description
Format string vulnerability in the logDetail function of applib.dll in McAfee Common Management Agent (CMA) 3.6.0.574 (Patch 3) and earlier, as used in ePolicy Orchestrator 4.0.0 build 1015, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in a sender field in an AgentWakeup request to UDP port 8082. NOTE: this issue only exists when the debug level is 8.  
Phase
Assigned (20080317)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
337050 31474 CVE-2008-1357 BUGTRAQ:20080312 Format string in McAfee Framework 3.6.0.569 (ePolicy Orchestrator 4.0)  View
337051 31474 CVE-2008-1357 URL:http://www.securityfocus.com/archive/1/archive/1/489476/100/0/threaded  View
337052 31474 CVE-2008-1357 MISC:http://aluigi.altervista.org/adv/meccaffi-adv.txt  View
337053 31474 CVE-2008-1357 CONFIRM:https://knowledge.mcafee.com/article/234/615103_f.sal_public.html  View
337054 31474 CVE-2008-1357 BID:28228  View
337055 31474 CVE-2008-1357 URL:http://www.securityfocus.com/bid/28228  View
337056 31474 CVE-2008-1357 VUPEN:ADV-2008-0866  View
337057 31474 CVE-2008-1357 URL:http://www.vupen.com/english/advisories/2008/0866/references  View
337058 31474 CVE-2008-1357 SECTRACK:1019609  View
337059 31474 CVE-2008-1357 URL:http://www.securitytracker.com/id?1019609  View
337060 31474 CVE-2008-1357 SECUNIA:29337  View
337061 31474 CVE-2008-1357 URL:http://secunia.com/advisories/29337  View
337062 31474 CVE-2008-1357 SREASON:3748  View
337063 31474 CVE-2008-1357 URL:http://securityreason.com/securityalert/3748  View
337064 31474 CVE-2008-1357 XF:mcafee-framework-format-string(41178)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
47126 JVNDB-2008-002436 複数の VMware 製品における権限を取得される脆弱性 複数の VMware 製品には、認証プロセスによる名前付きパイプへの接続に関する実装によって権限を取得される脆弱性が存在します。 CVE-2008-1361 31474 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002436.html  View