Lucene search
HistorySep 02, 2005 - 11:03 p.m.
CVE-2005-2790
cve-2005-2790
bfcommand & control server manager
bfcc
bfvcc
remote attackers
administrative restrictions
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.1 High
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
81.8%
BFCommand & Control Server Manager BFCC 1.22_A and earlier, and BFVCC 2.14_B and earlier, relies on the client to enforce permissions and perform actions such as disconnections, which allows remote attackers to bypass administrative restrictions via a modified client.
Affected configurations
Node
bfcommand_and_control_softwarebfccRange≤1.22_a
ORbfcommand_and_control_softwarebfvccMatch2.00_a
ORbfcommand_and_control_softwarebfvccMatch2.14_b
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.1 High
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
81.8%
Related for CVE-2005-2790