| Vulnerability Name: | CVE-2002-0690 (CCN-11559) | ||||||||
| Assigned: | 2002-07-12 | ||||||||
| Published: | 2003-03-17 | ||||||||
| Updated: | 2018-10-19 | ||||||||
| Summary: | Format string vulnerability in McAfee Security ePolicy Orchestrator (ePO) 2.5.1 allows remote attackers to execute arbitrary code via an HTTP GET request with a URI containing format strings. | ||||||||
| CVSS v3 Severity: | 9.0 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H)
| ||||||||
| CVSS v2 Severity: | 10.0 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C) 7.4 High (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)
6.7 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C/E:U/RL:OF/RC:C)
| ||||||||
| Vulnerability Type: | CWE-Other | ||||||||
| Vulnerability Consequences: | Gain Privileges | ||||||||
| References: | Source: MITRE Type: CNA CVE-2002-0690 Source: CCN Type: SA8311 McAfee ePolicy Orchestrator Format String Vulnerability Source: SECUNIA Type: UNKNOWN 8311 Source: ATSTAKE Type: Exploit, Patch, Vendor Advisory A031703-1 Source: CCN Type: McAfee Technical Support Web site Network Associates, Inc.--Support Source: OSVDB Type: UNKNOWN 4375 Source: CCN Type: OSVDB ID: 4375 McAfee ePolicy Orchestrator HTTP GET Request Remote Format String Source: BUGTRAQ Type: UNKNOWN 20030317 McAfee ePolicy Orchestrator Format String Vulnerability (a031703-1) Source: BID Type: Patch, Vendor Advisory 7111 Source: CCN Type: BID-7111 McAfee ePolicy Orchestrator HTTP GET Request Format String Vulnerability Source: CCN Type: @stake Inc. Security Advisory A031703-1 ePolicy Orchestrator Format String Vulnerability Source: XF Type: UNKNOWN epolicy-get-format-string(11559) Source: XF Type: UNKNOWN epolicy-get-format-string(11559) | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||