PT-2003-1139 · Mcafee · Mcafee Security Epolicy Orchestrator

Published 2003-03-18 · Updated 2018-10-19 · CVE-2002-0690

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions McAfee Security ePolicy Orchestrator (ePO) version 2.5.1

Description The issue allows remote attackers to execute arbitrary code via an HTTP GET request with a URI containing format strings.

Recommendations For version 2.5.1, update to a newer version that contains a fix for this issue.

Exploit

Fix

Related Identifiers

CVE-2002-0690

Affected Products

Mcafee Security Epolicy Orchestrator

References · 8

• 🔥 http://atstake.com/research/advisories/2003/a031703-1.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-0690 · Security Note
• http://securityfocus.com/bid/7111 · Vendor Advisory
• http://secunia.com/advisories/8311 · Note
• http://securityfocus.com/archive/1/315230/30/25490/threaded · Note
• http://osvdb.org/4375 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0690 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11559 · Note