CVE-2002-0690 Format string vulnerability in McAfee Security ePolicy Orchestrator (ePO) 2.5.1 allows remote attackers to execute arbitrary code via an HTTP GET request with a URI containing format strings.
HighCVSS 10.0
EPSS 8.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in McAfee Security ePolicy Orchestrator (ePO) 2.5.1 allows remote attackers to execute arbitrary code via an HTTP GET request with a URI containing format strings.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mcafee epolicy orchestrator | = 2.5.1 | No fix listed |
References
- 8311 third-party-advisory
- A031703-1 exploit patch vendor-advisory
- 4375 vdb-entry
- 20030317 McAfee ePolicy Orchestrator Format String Vulnerability (a031703-1) mailing-list
- 7111 patch vdb-entry vendor-advisory
- epolicy-get-format-string(11559) vdb-entry