Lucene search

K
cve[email protected]CVE-2005-2656
HistoryOct 03, 2022 - 4:22 p.m.

CVE-2005-2656

2022-10-0316:22:47
web.nvd.nist.gov
28
cve-2005-2656
polygen
vulnerability
denial of service
nvd
disk consumption
unauthorized activities

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

6.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Polygen before 1.0.6 generates precompiled grammar objects with world-writable permissions, which allows local users to cause a denial of service (disk consumption) and possibly perform other unauthorized activities.

Affected configurations

NVD
Node
polygenpolygenMatch1.0.6
CPENameOperatorVersion
polygen:polygenpolygeneq1.0.6

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

6.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%