CVE-2005-4505 : Unquoted Windows search path vulnerability in McAfee VirusScan Enterprise 8.0i (

Unquoted Windows search path vulnerability in McAfee VirusScan Enterprise 8.0i (patch 11) and CMA 3.5 (patch 5) might allow local users to gain privileges via a malicious "program.exe" file in the C: folder, which is run by naPrdMgr.exe when it attempts to execute EntVUtil.EXE under an unquoted "Program Files" path.

Published 2005-12-23 00:03:00

Updated 2017-07-20 01:29:17

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2005-4505

Mcafee » Common Management Agent » Version: 3.5 Update P5
cpe:2.3:a:mcafee:common_management_agent:3.5:p5:*:*:*:*:*:*
Matching versions
Mcafee » Virusscan Enterprise » Version: 8.0i Update P11
cpe:2.3:a:mcafee:virusscan_enterprise:8.0i:p11:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2005-4505

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 11 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2005-4505

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C	3.9	10.0	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

References for CVE-2005-4505

Jump to

Vulnerability Details : CVE-2005-4505

Products affected by CVE-2005-4505

Exploit prediction scoring system (EPSS) score for CVE-2005-4505

CVSS scores for CVE-2005-4505

References for CVE-2005-4505