Unscored severity · published May 20, 2005
CVE-2005-1675
Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 installs the client installation directories with insecure…
–
CVSS
1%
EPSS
No
On KEV
Description
Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 installs the client installation directories with insecure EVERYBODY permissions, which allows local users to gain sensitive information.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 62% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GW
Groove Workspace · Groove
through 2.5n_build_1871 · source: NVD
VO
Virtual Office · Groove
through 3.1_build_2338; through 3.1a_build_2364 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-1675
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-1675
Patch
http://secunia.com/advisories/15421
Third Party Advisory
http://www.kb.cert.org/vuls/id/443370
Third Party Advisory
http://www.kb.cert.org/vuls/id/JGEI-6BCRBX
More from Groove Workspace
–
CVE-2005-1676
Multiple cross-site scripting (XSS) vulnerabilities in Groove Mobile Workspace in Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before…
–
CVE-2005-1677
Unknown vulnerability in Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 allows remote attackers to bypass…
–
CVE-2005-1678
Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 does not properly display file extensions on attached or embedded…