medium5.0Public exploit code
CVE-2004-0095
McAfee ePolicy Orchestrator agent allows remote attackers to cause a denial of service (memory consumption and crash) and possibly execute arbitrary code via a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- McAfee ePolicy Orchestrator 1.x/2.x/3.0 Agent - POST Buffer Mismanagement2004-01-22 · dos · windows · Verified
Impact
McAfee ePolicy Orchestrator agent allows remote attackers to cause a denial of service (memory consumption and crash) and possibly execute arbitrary code via an HTTP POST request with an invalid Content-Length value, possibly triggering a buffer overflow.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mcafee | Epolicy Orchestrator | Version 3.6.0 |
References
- NVD record
- CVE.org record
- http://download.nai.com/products/patches/ePO/v3.1.0/EPO3013.zip
- http://www.osvdb.org/3744
- http://www.securityfocus.com/bid/9476
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14989
- http://download.nai.com/products/patches/ePO/v3.1.0/EPO3013.zip
- http://www.osvdb.org/3744
- http://www.securityfocus.com/bid/9476
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14989