| |||||||||||||
| Test ID: | 1.3.6.1.4.1.25623.1.0.11409 |
| Category: | Gain root remotely |
| Title: | ePolicy orchestrator format string |
| Summary: | ePolicy Orchestrator vulnerable to format string |
| Description: | The remote web server is vulnerable to a format string attack. If it is ePolicy Orchestrator, an attacker may use this flaw to execute code with the SYSTEM privileges on this host. Solution : upgrade your software or protect it with a filtering reverse proxy Risk factor : High |
| Cross-Ref: |
BugTraq ID: 7111 Common Vulnerability Exposure (CVE) ID: CVE-2002-0690 @stake Security Advisory: A031703-1 http://www.atstake.com/research/advisories/2003/a031703-1.txt Bugtraq: 20030317 McAfee ePolicy Orchestrator Format String Vulnerability (a031703-1) (Google Search) http://www.securityfocus.com/archive/1/archive/1/315230/30/25490/threaded http://www.securityfocus.com/bid/7111 http://www.osvdb.org/4375 http://secunia.com/advisories/8311 XForce ISS Database: epolicy-get-format-string(11559) http://xforce.iss.net/xforce/xfdb/11559 |
| Copyright | This script is Copyright (C) 2003 Renaud Deraison |
| This is only one of 32582 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below. |
|