New User, Welcome! Login

Re: Format string in McAfee Framework 3.6.0.569 (ePolicy Orchestrator 4.0)

From:	greentea-lemon blueyonder co uk
To:	bugtraq securityfocus com
Cc:	neodwija gmail com
Subject:	Re: Format string in McAfee Framework 3.6.0.569 (ePolicy Orchestrator 4.0)
Date:	Mon - Mar 17, 2008 09:17 AM


** McAfee Security Bulletin - Common Management Agent 3.6.0 format string
vulnerability with debug level set to 8 **

https://knowledge.mcafee.com/SupportSite/search.do?cmd=displayKC&docType=kc&externalId=615103&sliceId=SAL_Public

This knowledgebase article shows the following versions as vulnerable:

CMA 3.6.0.574 (Patch3) or earlier
McAfee Agent (MA) 4.0

You need to change the debug level of the CMA product before you are at
risk (as defined in the knowledgebase article).

Nearly all of LinuxRocket's features are free. Be kind and donate to the cause!