Lucene search
MitreCVE-2005-1045HistoryMay 02, 2005 - 4:00 a.m.
CVE-2005-1045
2005-05-0204:00:00
mitre
web.nvd.nist.gov
28
opentext
firstclass 8.0
remote code execution
unc path
security vulnerability
nvd
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8
Confidence
Low
EPSS
0.011
Percentile
84.6%
OpenText FirstClass 8.0 client does not properly sanitize strings before passing them to the Windows ShellExecute API, which allows remote attackers to execute arbitrary commands via a UNC path in a bookmark.
Affected configurations
Node
centrinitycentrinity_firstclass_desktop_clientMatch8.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| centrinity | centrinity_firstclass_desktop_client | 8.0 | cpe:2.3:a:centrinity:centrinity_firstclass_desktop_client:8.0:*:*:*:*:*:*:* |
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8
Confidence
Low
EPSS
0.011
Percentile
84.6%
Related for CVE-2005-1045