Lucene search
HistoryMay 03, 2005 - 4:00 a.m.
CVE-2005-1394
cve-2005-1394
arcgis
esri
arcinfo workstation
format string vulnerability
local users
privilege escalation
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
7 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
0.4%
Format string vulnerability in ArcGIS for ESRI ArcInfo Workstation 9.0 allows local users to gain privileges via format string specifiers in the ARCHOME environment variable to (1) wservice or (2) lockmgr.
Affected configurations
Node
esriarcgisMatch9.0
OResriarcinfo_workstationMatch9.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| esri:arcgis | esri arcgis | eq | 9.0 |
| esri:arcinfo_workstation | esri arcinfo workstation | eq | 9.0 |
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
7 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
0.4%
Related for CVE-2005-1394