CVE:CVE-2008-1357
CNNVD:CNNVD-200803-250
McAfee Framework是McAfee ePolicy Orchestrator中所实现的用于创建各种McAfee产品服务的框架。
McAfee Framework所安装的applib.dll库中的logDetail函数缺少必要的格式参数便调用了vsnwprintf，远程攻击者可能利用此漏洞控制服务器。
在McAfee ePolicy Orchestrator中可通过发送单个带有畸形sender、package或computer字段的UDP报文来触发这个漏洞。输出日志文件Agent_HOSTNAME.log位于Db文件夹中。
solution:Upgrade mcafee agent to a higher version than 4.0,and avoid the version 4.0; Upgrade mcafee cma to a higher version than 3.0.6.453,3.5.5.438,3.6.438,3.6.453,3.6.546,3.6.574,and avoid the version 3.0.6.453,3.5.5.438,3.6.438,3.6.453,3.6.546,3.6.574; Upgrade mcafee epolicy_orchestrator to a higher version than 4.0,and avoid the version 4.0; Upgrade mcafee mcafee_framework to a higher version than 3.6.569,and avoid the version 3.6.569