Unscored severity · published Aug 12, 2005
CVE-2005-2554
The web server for Network Associates ePolicy Orchestrator Agent 3.5.0 (patch 3) uses insecure permissions for the "Common Framework\Db" folder, which allows local users to read…
–
CVSS
0.5%
EPSS
No
On KEV
Description
The web server for Network Associates ePolicy Orchestrator Agent 3.5.0 (patch 3) uses insecure permissions for the "Common Framework\Db" folder, which allows local users to read arbitrary files by creating a subfolder in the EPO agent web root directory.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 41% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EO
Epolicy Orchestrator Agent · Network Associates
3.5.0_(patch_3) · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-2554
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-2554
knowledgemap.nai.com
http://knowledgemap.nai.com/KanisaSupportSite/search.do?cmd=displayKC&docType=kc&externalId=KBkb42216xml
Exploit
http://lists.virus.org/full-disclosure-0508/msg00376.html
reedarvin.thearvins.com
http://reedarvin.thearvins.com/20050811-01.html
secunia.com
http://secunia.com/advisories/16410
www.osvdb.org
http://www.osvdb.org/18735
www.securityfocus.com
http://www.securityfocus.com/bid/14549