CVE-2005-1760

sysreport 1.3.15 and earlier includes contents of the up2date file in a report, which leaks the...

7.5 HighFix available

CVE-2005-1760 is a high vulnerability (CVSS 7.5) in Redhat Sysreport, published June 13, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.97%, the 80th percentile. Fixed in sysreport 0:1.3.7.2-6.

What does this mean?

Severity: 7.5 HighCVSS 2.0, NVD
Exploit chance: 1.97%EPSS, 80th percentile
Exploitation: None knownNot on CISA’s or ENISA’s lists
Fixed in: 0:1.3.7.2-6sysreport +3 more

Description

sysreport 1.3.15 and earlier includes contents of the up2date file in a report, which leaks the password for a proxy server in plaintext and allows local users to gain privileges.

Exploit likelihood

1.97%Up 0.9 points since Feb 4, 2022

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`sysreport` Red Hat:enterprise_linux:3::as	before 0:1.3.7.2-6	0:1.3.7.2-6
`sysreport` Red Hat:enterprise_linux:3::desktop	before 0:1.3.7.2-6	0:1.3.7.2-6
`sysreport` Red Hat:enterprise_linux:3::es	before 0:1.3.7.2-6	0:1.3.7.2-6
`sysreport` Red Hat:enterprise_linux:3::ws	before 0:1.3.7.2-6	0:1.3.7.2-6

What each source reports

NVD Score used7.5

sysreport 1.3.15 and earlier includes contents of the up2date file in a report, which leaks the password for a proxy server in plaintext and allows local users to gain privileges.

Record: CVE-2005-1760
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE ListNo score

sysreport 1.3.15 and earlier includes contents of the up2date file in a report, which leaks the password for a proxy server in plaintext and allows local users to gain privileges.

Record: CVE-2005-1760
Updated: 2026-11-02

EUVDEUVD-2005-1762No score

sysreport 1.3.15 and earlier includes contents of the up2date file in a report, which leaks the password for a proxy server in plaintext and allows local users to gain privileges.

Record: EUVD-2005-1762
Updated: 2026-11-03

GitHub AdvisoriesGHSA-wfhc-fw4h-r7wwNo score

sysreport 1.3.15 and earlier includes contents of the up2date file in a report, which leaks the...

sysreport 1.3.15 and earlier includes contents of the up2date file in a report, which leaks the password for a proxy server in plaintext and allows local users to gain privileges.

Record: GHSA-wfhc-fw4h-r7ww
Updated: 2026-11-02

History

History
Recorded	Changed	Sources
Nov 10, 2026	facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 9 moreShow less