CVE-2005-1103
Severity Score
4.6
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Sygate Security Agent (SSA) in Sygate Secure Enterprise 3.5 through 4.1 does not prevent the security policy from being updated by unprivileged users, which allows local users to modify the policy by exporting the policy file, changing it, and importing it back into SSA.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2005-04-12 CVE Published
- 2005-04-13 CVE Reserved
- 2023-03-08 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (1)
| URL | Tag | Source |
|---|---|---|
| http://marc.info/?l=bugtraq&m=111335219201828&w=2 | Mailing List |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Sygate Technologies Search vendor "Sygate Technologies" | Security Agent Search vendor "Sygate Technologies" for product "Security Agent" | 3.5_build_2576 Search vendor "Sygate Technologies" for product "Security Agent" and version "3.5_build_2576" | - |
Affected
| ||||||
| Sygate Technologies Search vendor "Sygate Technologies" | Security Agent Search vendor "Sygate Technologies" for product "Security Agent" | 3.5_build_2577 Search vendor "Sygate Technologies" for product "Security Agent" and version "3.5_build_2577" | - |
Affected
| ||||||
| Sygate Technologies Search vendor "Sygate Technologies" | Security Agent Search vendor "Sygate Technologies" for product "Security Agent" | 4.0 Search vendor "Sygate Technologies" for product "Security Agent" and version "4.0" | - |
Affected
| ||||||
| Sygate Technologies Search vendor "Sygate Technologies" | Security Agent Search vendor "Sygate Technologies" for product "Security Agent" | 4.1 Search vendor "Sygate Technologies" for product "Security Agent" and version "4.1" | - |
Affected
| ||||||