Lucene search
HistoryMay 03, 2005 - 4:00 a.m.
CVE-2005-1372
cve-2005-1372
privilege escalation
bakbone netvault 7.1
security vulnerability
nvd
6.9 Medium
AI Score
Confidence
Low
4.6 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
0.4%
nvstatsmngr.exe process in BakBone NetVault 7.1 does not properly drop privileges before opening files, which allows local users to gain privileges via the Help menu.
Affected configurations
Node
bakbonenetvaultMatch7.1.1
ORbakbonenetvaultMatch7.3
| CPE | Name | Operator | Version |
|---|---|---|---|
| bakbone:netvault | bakbone netvault | eq | 7.1.1 |
| bakbone:netvault | bakbone netvault | eq | 7.3 |
6.9 Medium
AI Score
Confidence
Low
4.6 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
0.4%
Related for CVE-2005-1372