CVE-2005-2076
CVE-2005-2076 is a low-severity vulnerability in Hp Version Control Repository Manager with a CVSS 2.0 base score of 2.1. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Low (CVSS 2.0 base score 2.1)
- EPSS exploit prediction: 1% (40th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Hp Version Control Repository Manager
- Published:
- Last modified:
Description
HP Version Control Repository Manager (VCRM) before 2.1.1.730 does not properly handle the "@" character in a proxy password, which could allow attackers with physical access to obtain portions of the password when it is displayed to the screen.
Frequently asked questions
- What is CVE-2005-2076?
- HP Version Control Repository Manager (VCRM) before 2.1.1.730 does not properly handle the "@" character in a proxy password, which could allow attackers with physical access to obtain portions of the password when it is displayed to the screen.
- How severe is CVE-2005-2076?
- CVE-2005-2076 has a CVSS 2.0 base score of 2.1, rated low severity.
- Is CVE-2005-2076 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (40th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2005-2076?
- CVE-2005-2076 primarily affects Hp Version Control Repository Manager. In total, 10 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2005-2076?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2005-2076 published?
- CVE-2005-2076 was published on 2005-06-29 and last updated on 2026-06-16.
References
- http://secunia.com/advisories/15790
- http://securitytracker.com/id?1014267
- http://www.securityfocus.com/advisories/8734
- http://www.securityfocus.com/bid/14032
Affected products (10)
- cpe:2.3:a:hp:version_control_repository_manager:1.0.1288.1:*:*:*:*:*:*:*
- cpe:2.3:a:hp:version_control_repository_manager:1.0.2241.0:*:*:*:*:*:*:*
- cpe:2.3:a:hp:version_control_repository_manager:1.0.2289.0:*:*:*:*:*:*:*
- cpe:2.3:a:hp:version_control_repository_manager:1.0.2345.0:*:*:*:*:*:*:*
- cpe:2.3:a:hp:version_control_repository_manager:1.0.3085.0:*:*:*:*:*:*:*
- cpe:2.3:a:hp:version_control_repository_manager:1.0.3086.0:*:*:*:*:*:*:*
- cpe:2.3:a:hp:version_control_repository_manager:2.0.0.50:*:*:*:*:*:*:*
- cpe:2.3:a:hp:version_control_repository_manager:2.0.1.30:*:*:*:*:*:*:*
- cpe:2.3:a:hp:version_control_repository_manager:2.1.1.710:*:*:*:*:*:*:*
- cpe:2.3:a:hp:version_control_repository_manager:2.1.1.720:*:*:*:*:*:*:*
More vulnerabilities in Hp Version Control Repository Manager
- CVE-2015-3113 — Critical (CVSS 9.8): Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows…
- CVE-2016-8515 — High (CVSS 8.8): A remote malicious file upload vulnerability in HPE Version Control Repository Manager (VCRM) was found. The problem…
- CVE-2015-8651 — High (CVSS 8.8): Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and…
- CVE-2016-8513 — High (CVSS 8.0): A Cross-Site Request Forgery (CSRF) vulnerability in HPE Version Control Repository Manager (VCRM) was found. The…
- CVE-2015-5409 — High (CVSS 7.5): Buffer overflow in HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to…
- CVE-2015-5411 — Medium (CVSS 6.8): HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to obtain sensitive…