Lucene search

MitreCVE-2005-3546

HistoryNov 16, 2005 - 7:42 a.m.

CVE-2005-3546

2005-11-1607:42:00

mitre

web.nvd.nist.gov

f-secure

suid.cgi

linux

cve-2005-3546

privilege escalation

nvd

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

Confidence

Low

EPSS

0.001

Percentile

28.4%

JSON

suid.cgi scripts in F-Secure (1) Internet Gatekeeper for Linux before 2.15.484 and (2) Anti-Virus Linux Gateway before 2.16 are installed SUID with world-executable permissions, which allows local users to gain privilege.

Affected configurations

Nvd

Node

f-securef-secure_anti-viruslinux_gateways

f-secureinternet_gatekeeperlinux

VendorProductVersionCPE
f-securef-secure_anti-virus*cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:linux_gateways:*:*:*:*:*
f-secureinternet_gatekeeper*cpe:2.3:a:f-secure:internet_gatekeeper:*:*:linux:*:*:*:*:*

Vendor	Product	Version	CPE
f-secure	f-secure_anti-virus	*	cpe:2.3:a:f-secure:f-secure_anti-virus:::linux_gateways:::::*
f-secure	internet_gatekeeper	*	cpe:2.3:a:f-secure:internet_gatekeeper:::linux:::::*

References

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

Confidence

Low

EPSS

0.001

Percentile

28.4%

JSON

Related for CVE-2005-3546