CVE-2005-3414
eyeOS 0.8.4 stores usrinfo.xml under the web document root with insufficient access control,...
eyeOS 0.8.4 stores usrinfo.xml under the web document root with insufficient access control, which allows remote attackers to obtain user credentials.
Exploit likelihood
What each source reports
NVD Score used
eyeOS 0.8.4 stores usrinfo.xml under the web document root with insufficient access control, which allows remote attackers to obtain user credentials.
- Record
CVE-2005-3414- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
eyeOS 0.8.4 stores usrinfo.xml under the web document root with insufficient access control, which allows remote attackers to obtain user credentials.
- Record
CVE-2005-3414- Updated
- 2026-11-02
EUVDEUVD-2005-3413 No score
eyeOS 0.8.4 stores usrinfo.xml under the web document root with insufficient access control, which allows remote attackers to obtain user credentials.
- Record
EUVD-2005-3413- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cfm7-3295-jjpq No score
eyeOS 0.8.4 stores usrinfo.xml under the web document root with insufficient access control,...
eyeOS 0.8.4 stores usrinfo.xml under the web document root with insufficient access control, which allows remote attackers to obtain user credentials.
- Record
GHSA-cfm7-3295-jjpq- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-3414 is a high vulnerability (CVSS 7.5) in Eyeos Project Eyeos, published November 1, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.70%, the 77th percentile. No source names a fixed version.