7.5
CVE-2003-0616
- EPSS 3.04%
- Veröffentlicht 27.08.2003 04:00:00
- Zuletzt bearbeitet 16.06.2026 22:02:31
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginFormat string vulnerability in ePO service for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code via a POST request with format strings in the computerlist parameter, which are used when logging a failed name resolution.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mcafee ≫ Epolicy Orchestrator Version2.0
Mcafee ≫ Epolicy Orchestrator Version2.5
Mcafee ≫ Epolicy Orchestrator Version2.5 Updatesp1
Mcafee ≫ Epolicy Orchestrator Version2.5.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 3.04% | 0.858 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://www.atstake.com/research/advisories/2003/a073103-1.txt
http://www.nai.com/us/promos/mcafee/epo_vulnerabilities.asp