CVE-2005-3344

EPSS 8.0%

Vexday Risk Score

18Low

SSVC decision (CISA)

Attend

PoC available → attend closely

Exploit maturity

Functional exploit

Automatable exploit available (Nuclei/Metasploit).

CVSS —EPSS 8.0%KEV nãoPoC —Nuclei simMetasploit —Patch referenciado

Lifecycle

16 Nov 2005Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

The default installation of Horde 3.0.4 contains an administrative account with a blank password, which allows remote attackers to gain access.

Affected products

References