NVD

Id
1315  
Name
CVE-2008-1357  
Description
Format string vulnerability in the logDetail function of applib.dll in McAfee Common Management Agent (CMA) 3.6.0.574 (Patch 3) and earlier, as used in ePolicy Orchestrator 4.0.0 build 1015, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in a sender field in an AgentWakeup request to UDP port 8082. NOTE: this issue only exists when the debug level is 8.  
Reject
 
CVSS Version
2  
CVSS Score
5.4  
Severity
Medium  
CVSS Base Score
5.4  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-03  
Published
2008-03-17  
Modified Date
2011-03-07  
Seq
2008-1357  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
8245 1315 CVE-2008-1357 http://aluigi.altervista.org/adv/meccaffi-adv.txt  View
8246 1315 CVE-2008-1357 3748  View
8247 1315 CVE-2008-1357 20080312 Format string in McAfee Framework 3.6.0.569 (ePolicy Orchestrator 4.0)  View
8248 1315 CVE-2008-1357 28228  View
8249 1315 CVE-2008-1357 1019609  View
8250 1315 CVE-2008-1357 ADV-2008-0866  View
8251 1315 CVE-2008-1357 mcafee-framework-format-string(41178)  View
8252 1315 CVE-2008-1357 https://knowledge.mcafee.com/article/234/615103_f.sal_public.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
48931 JVNDB-2008-004241 ePolicy Orchestrator で使用される McAfee CMA におけるフォーマットストリングの脆弱性 ePolicy Orchestrator で使用される McAfee Common Management Agent (CMA) の applib.dll の logDetail 関数には、フォーマットストリングの脆弱性が存在します。 CVE-2008-1357 31470 CVE-2008-1357 1315 5.4 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004241.html 2008-03-17 2012-09-25 View