Lucene search

K
cve[email protected]CVE-2005-2765
HistoryOct 03, 2022 - 4:22 p.m.

CVE-2005-2765

2022-10-0316:22:48
web.nvd.nist.gov
23
windows firewall
ui
vulnerability
information hiding
windows registry
administrator privileges
nvd
cve-2005-2765

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.6%

The user interface in the Windows Firewall does not properly display certain malformed entries in the Windows Registry, which makes it easier for attackers with administrator privileges to hide activities if the administrator only uses the Windows Firewall interface to monitor exceptions. NOTE: the vendor disputes this issue, saying that since administrative privileges are already required, it is not a vulnerability. CVE has not yet formally decided if such “information hiding” issues should be included.

Affected configurations

NVD
Node
microsoftwindows_2003_serverMatch64-bit
OR
microsoftwindows_2003_serverMatchsp1
OR
microsoftwindows_xp64-bit
OR
microsoftwindows_xpsp2tablet_pc

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.6%

Related for CVE-2005-2765