CVE-2005-4505: High severity McAfee Common Management Agent vulnerability
Unquoted Windows search path vulnerability in McAfee VirusScan Enterprise 8.0i (patch 11) and CMA 3.5 (patch 5) might allow local users to gain privileges via a malicious "program.exe" file in the C: folder, which is run by naPrdMgr.exe when it attempts to execute EntVUtil.EXE under an unquoted "Program Files" path.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-4505?
CVE-2005-4505 has a medium level of severity due to its potential for local privilege escalation.
How do I fix CVE-2005-4505?
To fix CVE-2005-4505, update McAfee VirusScan Enterprise to a version later than 8.0i patch 11 and CMA to a version later than 3.5 patch 5.
Who is affected by CVE-2005-4505?
CVE-2005-4505 affects users of McAfee VirusScan Enterprise 8.0i patch 11 and the Common Management Agent 3.5 patch 5.
What is the impact of CVE-2005-4505?
The impact of CVE-2005-4505 allows local users to potentially execute arbitrary code with elevated privileges.
How does CVE-2005-4505 exploit the system?
CVE-2005-4505 exploits the unquoted search path in naPrdMgr.exe when it tries to execute EntVUtil.EXE.