CVE-2005-1905

The klif.sys driver in Kaspersky Labs Anti-Virus 5.0.227, 5.0.228, and 5.0.335 on Windows 2000 allows local users to gain privileges by modifying certain critical code addresses that are later accessed by privileged programs.

CVSS v2.0 7.2 HIGH

7.2^/10

CVSS v2.0 : HIGH

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://marc.info/?l=bugtraq&m=111817777430401&w=2
http://www.securityfocus.com/bid/13878
http://marc.info/?l=bugtraq&m=111817777430401&w=2
http://www.securityfocus.com/bid/13878

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus:5.0.227::windows_file_servers:::::
	cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus:5.0.228::windows_file_servers:::::
	cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus:5.0.335::windows_file_servers:::::
	cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus_personal:5.0.227:::::::*
	cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus_personal:5.0.228:::::::*
	cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus_personal:5.0.325:::::::*

History

20 Nov 2024, 23:58

Type	Values Removed	Values Added
References	~~() http://marc.info/?l=bugtraq&m=111817777430401&w=2 -~~	() http://marc.info/?l=bugtraq&m=111817777430401&w=2 -
References	~~() http://www.securityfocus.com/bid/13878 -~~	() http://www.securityfocus.com/bid/13878 -

Information

Published : 2005-06-09 04:00

Updated : 2024-11-20 23:58

NVD link : CVE-2005-1905

Mitre link : CVE-2005-1905

CVE.ORG link : CVE-2005-1905

JSON object : View

Products Affected

kaspersky_lab

kaspersky_anti-virus_personal
kaspersky_anti-virus

CWE

NVD-CWE-Other

{"id": "CVE-2005-1905", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2005-06-09T04:00:00.000", "references": [{"url": "http://marc.info/?l=bugtraq&m=111817777430401&w=2", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/13878", "source": "cve@mitre.org"}, {"url": "http://marc.info/?l=bugtraq&m=111817777430401&w=2", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/13878", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "The klif.sys driver in Kaspersky Labs Anti-Virus 5.0.227, 5.0.228, and 5.0.335 on Windows 2000 allows local users to gain privileges by modifying certain critical code addresses that are later accessed by privileged programs."}], "lastModified": "2024-11-20T23:58:23.573", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus:5.0.227:*:windows_file_servers:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "75093819-5663-4478-A291-60FF71D0258B"}, {"criteria": "cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus:5.0.228:*:windows_file_servers:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AD53B19B-64C8-4D05-81E0-770EEAE55D32"}, {"criteria": "cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus:5.0.335:*:windows_file_servers:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7D53F90C-00DB-4A12-9AD6-DB6917D0E034"}, {"criteria": "cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus_personal:5.0.227:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E101D150-B268-43AA-9876-469DF471DFC4"}, {"criteria": "cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus_personal:5.0.228:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "22A10BAE-B162-4276-8B08-8E449D9B282D"}, {"criteria": "cpe:2.3:a:kaspersky_lab:kaspersky_anti-virus_personal:5.0.325:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7F3AAC32-1911-4955-B1B1-CF7B26BEA3F3"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}