Unscored severity · published Mar 17, 2008
CVE-2008-1357
Format string vulnerability in the logDetail function of applib.dll in McAfee Common Management Agent (CMA) 3.6.0.574 (Patch 3) and earlier, as used in ePolicy Orchestrator 4.0.0…
–
CVSS
6.2%
EPSS
No
On KEV
Description
Format string vulnerability in the logDetail function of applib.dll in McAfee Common Management Agent (CMA) 3.6.0.574 (Patch 3) and earlier, as used in ePolicy Orchestrator 4.0.0 build 1015, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in a sender field in an AgentWakeup request to UDP port 8082. NOTE: this issue only exists when the debug level is 8.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.2% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AG
Agent · Mcafee
4.0 · source: NVD
CM
Cma · Mcafee
3.0.6.453; 3.5.5.438; 3.6.438; 3.6.453; 3.6.546; 3.6.574 · source: NVD
EO
Epolicy Orchestrator · Mcafee
4.0 · source: NVD
MF
Mcafee Framework · Mcafee
3.6.569 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-1357
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-1357
Exploit
http://aluigi.altervista.org/adv/meccaffi-adv.txt
Vendor Advisory
http://secunia.com/advisories/29337
securityreason.com
http://securityreason.com/securityalert/3748
www.securityfocus.com
http://www.securityfocus.com/archive/1/489476/100/0/threaded
Exploit
http://www.securityfocus.com/bid/28228
www.securitytracker.com
http://www.securitytracker.com/id?1019609
More from Agent
9.8
CVE-2018-6703
Use After Free in Remote logging (which is disabled by default) in McAfee McAfee Agent (MA) 5.x prior to 5.6.0 allows remote unauthenticated attackers to cause a Denial of Service…
8.8
CVE-2021-1257
A vulnerability in the web-based management interface of Cisco DNA Center Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF)…
7.8
CVE-2022-1256
A local privilege escalation vulnerability in MA for Windows prior to 5.7.6 allows a local low privileged user to gain system privileges through running the repair functionality
7.8
CVE-2022-0166
A privilege escalation vulnerability in the McAfee Agent prior to 5.7.5
7.8
CVE-2021-31854
A command Injection Vulnerability in McAfee Agent (MA) for Windows prior to 5.7.5 allows local users to inject arbitrary shell code into the file cleanup.exe