CVE-2005-3280

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-10-23 · updated 2026-06-16

Description

Paros 3.2.5 uses a default password for the "sa" account in the underlying HSQLDB database and does not restrict access to the local machine, which allows remote attackers to gain privileges.

Affected products

Paros: 3.2.5

References

http://secunia.com/advisories/17089
http://secunia.com/advisories/18626
http://www.gentoo.org/security/en/glsa/glsa-200601-15.xml
http://www.securityfocus.com/archive/1/423446/100/0/threaded
http://www.securityfocus.com/bid/15141
http://www.zone-h.com/en/advisories/read/id=8286/
https://exchange.xforce.ibmcloud.com/vulnerabilities/22557
http://secunia.com/advisories/17089
http://secunia.com/advisories/18626
http://www.gentoo.org/security/en/glsa/glsa-200601-15.xml
http://www.securityfocus.com/archive/1/423446/100/0/threaded
http://www.securityfocus.com/bid/15141

Get alerted when CVE-2005-3280 or the next vulnerability affects your stack