CVEvulnerability
CVE-2004-0095
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2004-02-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Description
McAfee ePolicy Orchestrator agent allows remote attackers to cause a denial of service (memory consumption and crash) and possibly execute arbitrary code via an HTTP POST request with an invalid Content-Length value, possibly triggering a buffer overflow.
Affected configurations
• mcafee epolicy orchestrator 3.6.0
Related
Referenced by CWE · observed example (1)
- CWE-130 Improper Handling of Length Parameter Inconsistency weakness
References
- http://download.nai.com/products/patches/ePO/v3.1.0/EPO3013.zip download.nai.com
- http://www.osvdb.org/3744 www.osvdb.org
- http://www.securityfocus.com/bid/9476 Exploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14989 exchange.xforce.ibmcloud.com
- http://download.nai.com/products/patches/ePO/v3.1.0/EPO3013.zip download.nai.com
- http://www.osvdb.org/3744 www.osvdb.org
- http://www.securityfocus.com/bid/9476 Exploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14989 exchange.xforce.ibmcloud.com