Format string vulnerability in the SMTP server for McAfee WebShield 4.5 MR2 and earlier allows remote attackers to execute arbitrary code via format strings in the domain name portion of a destination address, which are not properly handled when a bounce message is constructed.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Webshield_smtp | Mcafee | * | 4.5 (including) |