PT-2003-1139 · Mcafee · Mcafee Security Epolicy Orchestrator

Publicado 2003-03-18 · Atualizado 2018-10-19 · CVE-2002-0690

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions McAfee Security ePolicy Orchestrator (ePO) version 2.5.1

Description The issue allows remote attackers to execute arbitrary code via an HTTP GET request with a URI containing format strings.

Recommendations For version 2.5.1, update to a newer version that contains a fix for this issue.

Exploit

Correção

Identificadores relacionados

CVE-2002-0690

Produtos afetados

Mcafee Security Epolicy Orchestrator

Referências · 8

• 🔥 http://atstake.com/research/advisories/2003/a031703-1.txt · Exploit
• http://secunia.com/advisories/8311 · Nota
• http://securityfocus.com/archive/1/315230/30/25490/threaded · Nota
• http://osvdb.org/4375 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0690 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-0690 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11559 · Nota
• http://securityfocus.com/bid/7111 · Aviso do Fabricante