Lucene search

[email protected]NVD:CVE-2005-0515

HistoryMay 18, 2005 - 4:00 a.m.

CVE-2005-0515

2005-05-1804:00:00

[email protected]

web.nvd.nist.gov

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.5

Confidence

High

EPSS

Percentile

5.1%

JSON

Smc.exe in My Firewall Plus 5.0 build 1117, and possibly other versions, does not drop privileges before launching the Log Viewer export functionality, which allows local users to corrupt arbitrary files by saving log files.

Affected configurations

Nvd

Node

webroot_softwaremy_firewall_plusMatch5.0

VendorProductVersionCPE
webroot_softwaremy_firewall_plus5.0cpe:2.3:a:webroot_software:my_firewall_plus:5.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
webroot_software	my_firewall_plus	5.0	cpe:2.3:a:webroot_software:my_firewall_plus:5.0:::::::*

References

secunia.com/advisories/13577

secunia.com/secunia_research/2004-20/advisory/

www.securityfocus.com/bid/12842

www.webroot.com/services/mfp_advisory.php

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.5

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for NVD:CVE-2005-0515

cvelist1 cve1