Lucene search
HistorySep 14, 2005 - 8:03 p.m.
CVE-2005-2891
cve-2005-2891
webarchivex.dll
scripting
remote attackers
file manipulation
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
6.9 Medium
AI Score
Confidence
High
0.047 Low
EPSS
Percentile
92.7%
WebArchiveX.dll 5.5.0.76 installed before September 6th, 2005 is marked safe for scripting by default, which allows remote attackers to read or write to arbitrary files via the (1) MakeArchive or (2) MakeArchiveStr methods.
Affected configurations
Node
csystemswebarchivexMatch5.5.0.76
| CPE | Name | Operator | Version |
|---|---|---|---|
| csystems:webarchivex | csystems webarchivex | eq | 5.5.0.76 |
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
6.9 Medium
AI Score
Confidence
High
0.047 Low
EPSS
Percentile
92.7%
Related for CVE-2005-2891