CVE-2004-0038

Опубликовано: 14 июн. 2004

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

McAfee ePolicy Orchestrator (ePO) 2.5.1 Patch 13 and 3.0 SP2a Patch 3 allows remote attackers to execute arbitrary commands via certain HTTP POST requests to the spipe/file handler on ePO TCP port 81.

Ссылки

http://download.nai.com/products/patches/ePO/v2.x/Patch14.txt
Vendor Advisory
http://www.osvdb.org/5626
Patch
Vendor Advisory
http://www.securityfocus.com/bid/10200
Patch
Vendor Advisory
http://xforce.iss.net/xforce/alerts/id/173
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/14166
http://download.nai.com/products/patches/ePO/v2.x/Patch14.txt
Vendor Advisory
http://www.osvdb.org/5626
Patch
Vendor Advisory
http://www.securityfocus.com/bid/10200
Patch
Vendor Advisory
http://xforce.iss.net/xforce/alerts/id/173
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/14166

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mcafee:epolicy_orchestrator:2.5:*:*:*:*:*:*:*

cpe:2.3:a:mcafee:epolicy_orchestrator:2.5:sp1:*:*:*:*:*:*

cpe:2.3:a:mcafee:epolicy_orchestrator:2.5.1:*:*:*:*:*:*:*

cpe:2.3:a:mcafee:epolicy_orchestrator:3.0:*:*:*:*:*:*:*

cpe:2.3:a:mcafee:epolicy_orchestrator:3.0:sp2a:*:*:*:*:*:*

EPSS

Процентиль: 82%

0.01782

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-r27g-fqf5-pq2m

github

больше 3 лет назад