CVE-2008-1357: Use of Externally-Controlled Format String

Format string vulnerability in the logDetail function of applib.dll in McAfee Common Management Agent CMA 3.6.0.574 Patch 3 and earlier, as used in ePolicy Orchestrator 4.0.0 build 1015, allows remote attackers to cause a denial of service crash or execute arbitrary code via format string...

CVE-2006-5272: Undefined Security Weakness

Stack-based buffer overflow in McAfee ePolicy Orchestrator 3.5 through 3.6.1, ProtectionPilot 1.1.1 and 1.5, and Common Management Agent CMA 3.6.0.453 and earlier allows remote attackers to execute arbitrary code via a crafted ping packet...