Unscored severity · published Jun 29, 2005
CVE-2005-2076
HP Version Control Repository Manager (VCRM) before 2.1.1.730 does not properly handle the "@" character in a proxy password, which could allow attackers with physical access to…
–
CVSS
0.5%
EPSS
No
On KEV
Description
HP Version Control Repository Manager (VCRM) before 2.1.1.730 does not properly handle the "@" character in a proxy password, which could allow attackers with physical access to obtain portions of the password when it is displayed to the screen.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 44% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VC
Version Control Repository Manager · HP
1.0.1288.1; 1.0.2241.0; 1.0.2289.0; 1.0.2345.0; 1.0.3085.0; 1.0.3086.0; +4 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-2076
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-2076
Patch
http://secunia.com/advisories/15790
Patch
http://securitytracker.com/id?1014267
www.securityfocus.com
http://www.securityfocus.com/advisories/8734
Patch
http://www.securityfocus.com/bid/14032
More from Version Control Repository Manager
9.8
CVE-2015-3113
Adobe Flash Player Heap-Based Buffer Overflow Vulnerability
8.8
CVE-2015-8651
Adobe Flash Player Integer Overflow Vulnerability
8.8
CVE-2016-8515
A remote malicious file upload vulnerability in HPE Version Control Repository Manager (VCRM) was found
8.0
CVE-2016-8513
A Cross-Site Request Forgery (CSRF) vulnerability in HPE Version Control Repository Manager (VCRM) was found
6.5
CVE-2017-5787
A remote denial of service vulnerability in HPE Version Control Repository Manager (VCRM) in all versions prior to 7.6 was found