CVE-2005-2986

Опубликовано: 20 сент. 2005

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

The v3flt2k.sys driver in AhnLab V3Pro 2004 Build 6.0.0.383, V3 VirusBlock 2005 Build 6.0.0.383, V3Net for Windows Server 6.0 Build 6.0.0.383 does not properly validate the source of the DeviceIoControl commands, which allows remote attackers to gain privileges.

Ссылки

http://info.ahnlab.com/english/advisory/01.html
Patch
Vendor Advisory
http://marc.info/?l=bugtraq&m=112680062609377&w=2
http://secunia.com/advisories/15674/
Patch
Vendor Advisory
http://www.securityfocus.com/bid/14847
https://exchange.xforce.ibmcloud.com/vulnerabilities/22297
http://info.ahnlab.com/english/advisory/01.html
Patch
Vendor Advisory
http://marc.info/?l=bugtraq&m=112680062609377&w=2
http://secunia.com/advisories/15674/
Patch
Vendor Advisory
http://www.securityfocus.com/bid/14847
https://exchange.xforce.ibmcloud.com/vulnerabilities/22297

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ahnlab:v3_virusblock_2005:6.0.0.383:*:*:*:*:*:*:*

cpe:2.3:a:ahnlab:v3net:6.0.0.383:*:win_server:*:*:*:*:*

cpe:2.3:a:ahnlab:v3pro_2004:6.0.0.383:*:*:*:*:*:*:*

EPSS

Процентиль: 78%

0.01108

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-7862-pcm3-qwxx

github

почти 4 года назад