Vulnerability in Mcafee Epolicy Orchestrator
CVE-2003-0616
Format string vulnerability in ePO service for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code via a POST request with format strings in the computerlist parameter, which are used when logging a failed name resolution.
EPSS: 0.030 (86.1th percentile) — read the EPSS interpretation.
Affected products
- Mcafee Epolicy_orchestrator — versions 2.0, 2.5, 2.5.1
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_ATSTAKE, vendor-advisory)
- cve@mitre.org (x_refsource_CONFIRM)