Executive Summary
Informations | |||
---|---|---|---|
Name | CVE-2005-4696 | First vendor Publication | 2005-12-31 |
Vendor | Cve | Last vendor Modification | 2017-10-05 |
Security-Database Scoring CVSS v3
Cvss vector : N/A | |||
---|---|---|---|
Overall CVSS Score | NA | ||
Base Score | NA | Environmental Score | NA |
impact SubScore | NA | Temporal Score | NA |
Exploitabality Sub Score | NA | ||
Calculate full CVSS 3.0 Vectors scores |
Security-Database Scoring CVSS v2
Cvss vector : (AV:L/AC:L/Au:N/C:P/I:N/A:N) | |||
---|---|---|---|
Cvss Base Score | 2.1 | Attack Range | Local |
Cvss Impact Score | 2.9 | Attack Complexity | Low |
Cvss Expoit Score | 3.9 | Authentication | None Required |
Calculate full CVSS 2.0 Vectors scores |
Detail
The Microsoft Wireless Zero Configuration system (WZCS) stores WEP keys and pair-wise Master Keys (PMK) of the WPA pre-shared key in plaintext in memory of the explorer process, which allows attackers with access to process memory to steal the keys and access the network. |
Original Source
Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4696 |
CPE : Common Platform Enumeration
Type | Description | Count |
---|---|---|
Os | 4 |
Open Source Vulnerability Database (OSVDB)
Id | Description |
---|---|
19873 | Microsoft Windows XP Wireless Zero Configuration Credential/Key Disclosure Microsoft Windows XP Home & Professional contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when a local non-privileged user is allowed to retrieve configured wireless profiles using the "WZCQueryInterface()" API via the Wireless Zero Configuration service (wzcsapi.dll), which will disclose configured SSIDs, WEP keys, or the PMK (Pairwise Master Key) that is used for pre-shared key authentication in WPA (Wi-Fi Protected Access), resulting in a loss of confidentiality. Additionally, the explorer process stores the same information in plaintext offering an additional method to gain the information. |
Sources (Detail)
Alert History
Date | Informations |
---|---|
2021-05-04 12:03:31 |
|
2021-04-22 01:03:48 |
|
2020-05-23 00:17:13 |
|
2017-10-05 09:22:54 |
|
2017-07-20 09:23:16 |
|
2016-06-28 15:32:13 |
|
2016-04-26 14:08:31 |
|
2013-05-11 11:38:40 |
|