Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2003-0616

EPSS 1.97% · P84
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2003-0616

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Format string vulnerability in ePO service for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code via a POST request with format strings in the computerlist parameter, which are used when logging a failed name resolution.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
McAfee Security ePolicy Orchestrator ComputerList远程格式串处理漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
McAfee Security ePolicy Orchestrator是一款企业级反病毒管理工具。ePolicy Orchestrator是策略驱动配置，并包含报告工具。 McAfee ePolicy Orchestrator对部分POST请求处理不正确，远程攻击者可以利用这个漏洞进行格式字符串攻击，可能以ePO进程权限在系统上执行任意指令。 如果发送包含多个格式字符串字符的ComputerList参数POST请求到服务器，可导致当常识记录名字解析失败日志时服务崩溃。精心构建提交数据可能以ePO进程权限
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2003-0616

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2003-0616

请登录查看更多情报信息。

Same Patch Batch · n/a · 2003-08-01 · 15 CVEs total

CVE-2003-0148McAfee Security ePolicy Orchestrator MSDE SA帐户信息泄露漏洞
CVE-2003-0149McAfee Security ePolicy Orchestrator Agent POST请求远程堆溢出漏洞
CVE-2003-0459KDE Konqueror HTTP REFERER验证信息泄露漏洞
CVE-2003-0466多家厂商C程序库realpath()单字节缓冲区溢出漏洞
CVE-2003-0575SGI IRIX NSD AUTH_UNIX GID List特权提升漏洞
CVE-2003-0606CVSup-Mirror以不安全方式创建临时文件漏洞
CVE-2003-0609Sun Solaris实时连接器本地缓冲区溢出漏洞
CVE-2003-0610McAfee ePolicy Orchestrator Agent远程文件泄露漏洞
CVE-2003-0611Xtokkaetama本地缓冲区溢出漏洞
CVE-2003-0614Gallery搜索引擎跨站脚本漏洞
CVE-2003-0615CGI.pm Start_Form跨站脚本漏洞
CVE-2003-0619Linux Kernel 2.4 XDR数据包处理NFSv3远程服务拒绝漏洞
CVE-2003-0620多个ManDB效用本地缓冲区溢出漏洞
CVE-2003-0625xfstt未明内存泄漏漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2003-0616

No comments yet

Leave a comment