Lucene search

[email protected]CVE-2005-4590

HistoryDec 30, 2005 - 11:03 a.m.

CVE-2005-4590

2005-12-3011:03:00

[email protected]

web.nvd.nist.gov

spb kiosk engine

cve-2005-4590

local privilege escalation

autorun setting

security vulnerability

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Spb Kiosk Engine 1.0.0.1 allows local users to bypass restrictions on allowed applications via (1) removable media containing a program that will execute because of the autorun setting and (2) applications that are able to invoke other applications, as demonstrated by a file: URL specifying a .exe file.

Affected configurations

NVD

Node

spbkiosk_engineMatch1.0.0.1

CPENameOperatorVersion
spb:kiosk_enginespb kiosk engineeq1.0.0.1

CPE	Name	Operator	Version
spb:kiosk_engine	spb kiosk engine	eq	1.0.0.1

References

secunia.com/advisories/18243

www.airscanner.com/security/05083102_kioskremove.htm

www.securityfocus.com/archive/1/420450/100/0/threaded

exchange.xforce.ibmcloud.com/vulnerabilities/23905

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2005-4590

cvelist1 nvd1