CVE-2005-2890 Security feature bypass in n/a
Local users can bypass security restrictions and access the secured environment by directly accessing the PhysicalMemory device.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2005-2890?
CVE-2005-2890 is a medium-severity vulnerability in n/a, published on 14 Sep 2005. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
SecureOL VE2 1.05.1008 does not properly restrict public access to physical memory, which allows local users to bypass intended restrictions and gain access to the secured environment via direct access to the PhysicalMemory device.
Which versions are affected by CVE-2005-2890?
It affects 1 product.
Products include Secureol Ve2.
How do I fix CVE-2005-2890?
No fix has been published for CVE-2005-2890 yet. Limit exposure of the affected software until one is available.
Is CVE-2005-2890 being exploited?
There is no known exploitation of CVE-2005-2890 in the wild and no public exploit code.
Sources
Also known as GHSA-6c37-r4j2-w535.