VulnerabilityModified
CVE-2005-1675
Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 installs the client installation directories with insecure EVERYBODY permissions, which allows local users to gain sensitive information.
MEDIUM 4.6EPSS 0.97%
Does this matter?
Lower severity and a low EPSS score (0.97%). Track it; it rarely justifies an emergency change on its own.
Description
Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 installs the client installation directories with insecure EVERYBODY permissions, which allows local users to gain sensitive information.
- CVSS 2.0
- 4.6 MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 0.97% probability · 60th percentile
- CISA KEV
- Not listed
- Affected
- groove/groove workspace · groove/virtual office
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/15421Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/443370Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/JGEI-6BCRBXThird Party Advisory, US Government Resource
- http://secunia.com/advisories/15421Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/443370Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/JGEI-6BCRBXThird Party Advisory, US Government Resource
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.