Vulnerability in Ahnlab V3net
CVE-2005-2986
The v3flt2k.sys driver in AhnLab V3Pro 2004 Build 6.0.0.383, V3 VirusBlock 2005 Build 6.0.0.383, V3Net for Windows Server 6.0 Build 6.0.0.383 does not properly validate the source of the DeviceIoControl commands, which allows remote attackers to gain privileges.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 7.5 (High). Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.024 (83.3th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 83rd percentile — 83.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.024 · newest: 0.024 · change: 0.000
Affected products
- Ahnlab V3net — versions 6.0.0.383
- Ahnlab V3pro 2004 — versions 6.0.0.383
- Ahnlab V3 Virusblock 2005 — versions 6.0.0.383
References
- marc.info/ (mailing-list)
- info.ahnlab.com/english/advisory/01.html (Patch, Vendor Advisory)
- exchange.xforce.ibmcloud.com/vulnerabilities/22297 (vdb-entry)
- www.securityfocus.com/bid/14847 (vdb-entry)
- secunia.com/advisories/15674/ (Patch, Vendor Advisory, third-party-advisory)