Описание
Integer overflow in McAfee E-Business Server before 8.5.3 for Solaris, and before 8.1.2 for Linux, HP-UX, and AIX, allows remote attackers to execute arbitrary code via a large length value in an authentication packet, which results in a heap-based buffer overflow.
Ссылки
- Vendor Advisory
- Vendor Advisory
- Patch
- Vendor Advisory
- Vendor Advisory
- Patch
Уязвимые конфигурации
Конфигурация 1Версия до 8.1.1 (включая)Версия до 8.1.1 (включая)Версия до 8.1.1 (включая)Версия до 8.5.2 (включая)
Одно из
cpe:2.3:a:mcafee:e-business_server:*:*:aix:*:*:*:*:*
cpe:2.3:a:mcafee:e-business_server:*:*:hpux:*:*:*:*:*
cpe:2.3:a:mcafee:e-business_server:*:*:linux:*:*:*:*:*
cpe:2.3:a:mcafee:e-business_server:*:*:solaris:*:*:*:*:*
EPSS
Процентиль: 92%
0.08123
Низкий
9.3 Critical
CVSS2
Дефекты
CWE-189
Связанные уязвимости
github
почти 4 года назад
Integer overflow in McAfee E-Business Server before 8.5.3 for Solaris, and before 8.1.2 for Linux, HP-UX, and AIX, allows remote attackers to execute arbitrary code via a large length value in an authentication packet, which results in a heap-based buffer overflow.
EPSS
Процентиль: 92%
0.08123
Низкий
9.3 Critical
CVSS2
Дефекты
CWE-189