CVE-2004-0095 McAfee ePolicy Orchestrator agent allows remote attackers to cause a denial of service (memory consumption and crash) and possibly execute arbitrary code via an HTTP POST request with an invalid Conte...
MediumCVSS 5.0
EPSS 37.2%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
McAfee ePolicy Orchestrator agent allows remote attackers to cause a denial of service (memory consumption and crash) and possibly execute arbitrary code via an HTTP POST request with an invalid Content-Length value, possibly triggering a buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mcafee epolicy orchestrator | = 3.6.0 | No fix listed |
References
- download.nai.com
- 3744 vdb-entry
- 9476 exploit vdb-entry vendor-advisory
- epolicy-contentlength-post-dos(14989) vdb-entry