Lucene search

K
nvd[email protected]NVD:CVE-2005-1664
HistoryMay 18, 2005 - 4:00 a.m.

CVE-2005-1664

2005-05-1804:00:00
web.nvd.nist.gov
7

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

AI Score

6.3

Confidence

Low

EPSS

0.113

Percentile

95.2%

The __VIEWSTATE functionality in Microsoft ASP.NET 1.x allows remote attackers to conduct replay attacks to (1) apply a ViewState generated from one view to a different view, (2) reuse ViewState information after the application’s state has changed, or (3) use the ViewState to conduct attacks or expose content to third parties.

Affected configurations

Nvd
Node
microsoftasp.netMatch1.0
OR
microsoftasp.netMatch1.1
VendorProductVersionCPE
microsoftasp.net1.0cpe:2.3:a:microsoft:asp.net:1.0:*:*:*:*:*:*:*
microsoftasp.net1.1cpe:2.3:a:microsoft:asp.net:1.1:*:*:*:*:*:*:*

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

AI Score

6.3

Confidence

Low

EPSS

0.113

Percentile

95.2%

Related for NVD:CVE-2005-1664