Lucene search
HistoryDec 23, 2005 - 12:03 a.m.
CVE-2005-4506
cve-2005-4506
nexus concepts
dev hound
privilege escalation
username
password
cleartext
local users
nvd
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Nexus Concepts Dev Hound 2.24 and earlier stores username and password information in cleartext in the devhound.tdbd file, which allows local users to gain privileges.
Affected configurations
Node
nexus_conceptsdev_houndMatch1.50
ORnexus_conceptsdev_houndMatch1.51
ORnexus_conceptsdev_houndMatch1.52
ORnexus_conceptsdev_houndMatch1.60
ORnexus_conceptsdev_houndMatch1.61
ORnexus_conceptsdev_houndMatch1.70
ORnexus_conceptsdev_houndMatch1.80
ORnexus_conceptsdev_houndMatch1.81
ORnexus_conceptsdev_houndMatch2.0
ORnexus_conceptsdev_houndMatch2.01
ORnexus_conceptsdev_houndMatch2.02
ORnexus_conceptsdev_houndMatch2.03
ORnexus_conceptsdev_houndMatch2.04
ORnexus_conceptsdev_houndMatch2.10
ORnexus_conceptsdev_houndMatch2.11
ORnexus_conceptsdev_houndMatch2.12
ORnexus_conceptsdev_houndMatch2.13
ORnexus_conceptsdev_houndMatch2.20
ORnexus_conceptsdev_houndMatch2.21
ORnexus_conceptsdev_houndMatch2.22
ORnexus_conceptsdev_houndMatch2.23
ORnexus_conceptsdev_houndMatch2.24
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2005-4506