4.6
CVE-2005-2454
- EPSS 0.42%
- Veröffentlicht 31.12.2005 05:00:00
- Zuletzt bearbeitet 16.06.2026 22:14:54
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
IBM Lotus Notes 6.5.4 and 6.5.5, and 7.0.0 and 7.0.1, uses insecure default permissions (Everyone/Full Control) for the "Notes" folder and all children, which allows local users to gain privileges and modify, add, or delete files in that folder.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Lotus Notes Version6.5.4
Ibm ≫ Lotus Notes Version6.5.5
Ibm ≫ Lotus Notes Version7.0.0
Ibm ≫ Lotus Notes Version7.0.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.42% | 0.337 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.6 | 3.9 | 6.4 |
AV:L/AC:L/Au:N/C:P/I:P/A:P
|
http://secunia.com/advisories/19537
http://secunia.com/advisories/27342
http://secunia.com/secunia_research/2005-29/advisory/
http://securitytracker.com/id?1017086
http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21246773
http://www.kb.cert.org/vuls/id/383092
http://www.osvdb.org/29761
http://www.securityfocus.com/archive/1/449126/100/0/threaded
http://www.securityfocus.com/bid/20612
http://www.vupen.com/english/advisories/2006/4093
https://exchange.xforce.ibmcloud.com/vulnerabilities/29660