CVE-2008-1357

McAfee Common Management Agent <= 3.6.0.574 - Remote Code Execution via Format String in AgentWakeup Request

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-1357. PoCs published by Luigi Auriemma.

AI-analyzed exploit summary The provided text describes a remote format-string vulnerability in McAfee Framework, which can lead to arbitrary code execution or denial-of-service conditions. The vulnerability is exploitable only when the debug level is raised to 8.

Description

Format string vulnerability in the logDetail function of applib.dll in McAfee Common Management Agent (CMA) 3.6.0.574 (Patch 3) and earlier, as used in ePolicy Orchestrator 4.0.0 build 1015, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in a sender field in an AgentWakeup request to UDP port 8082. NOTE: this issue only exists when the debug level is 8.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Luigi Auriemma · textdoswindows
https://www.exploit-db.com/exploits/31399

The provided text describes a remote format-string vulnerability in McAfee Framework, which can lead to arbitrary code execution or denial-of-service conditions. The vulnerability is exploitable only when the debug level is raised to 8.

Classification
Writeup 90%
Attack Type
Rce
Complexity
Moderate
Reliability
Theoretical
Target: McAfee Common Management Agent 3.6.0.574 (Patch3) or earlier, McAfee Agent (MA) 4.0, Framework 2.6.0.569, ePolicy Orchestrator 4.0
No auth needed
Prerequisites: Debug level set to 8
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (9)

Core 9
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/41178
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/3748
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1019609
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/29337
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/28228
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/0866/references
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/489476/100/0/threaded

Scores

EPSS 0.0620
EPSS Percentile 92.6%

Details

CWE
CWE-134
Status published
Products (9)
mcafee/agent 4.0
mcafee/cma 3.0.6.453
mcafee/cma 3.5.5.438
mcafee/cma 3.6.438
mcafee/cma 3.6.453
mcafee/cma 3.6.546
mcafee/cma 3.6.574
mcafee/epolicy_orchestrator 4.0
mcafee/mcafee_framework 3.6.569
Published Mar 17, 2008
Tracked Since Feb 18, 2026