CVE-2005-2554: Low severity Network Associates ePolicy Orchestrator Agent vulnerability
The web server for Network Associates ePolicy Orchestrator Agent 3.5.0 (patch 3) uses insecure permissions for the "Common Framework\Db" folder, which allows local users to read arbitrary files by creating a subfolder in the EPO agent web root directory.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-2554?
CVE-2005-2554 is classified as a medium severity vulnerability due to its potential for local file reading risks.
How do I fix CVE-2005-2554?
To fix CVE-2005-2554, ensure that the permissions for the "Common Framework\Db" folder are properly configured to restrict unauthorized access.
Who is affected by CVE-2005-2554?
CVE-2005-2554 affects local users of Network Associates ePolicy Orchestrator Agent version 3.5.0 (patch 3).
What type of attack can CVE-2005-2554 facilitate?
CVE-2005-2554 can facilitate unauthorized access to arbitrary files by local users through folder creation in the web root directory.
Is there any patch available for CVE-2005-2554?
There is no specific patch for CVE-2005-2554; instead, adjusting file permissions is recommended to mitigate the vulnerability.