CVE-2005-4261

HIGH 7.8CVE-2005-4261 · Published 15/12/2005 · updated 16/06/2026

In short

CVE-2005-4261 is a HIGH (CVSS 7.8) vulnerability affecting cp+ (positive software).
Chance of exploitation in the next 30 days (EPSS): 1.7%, higher than 77.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
cp+ positive_software	`= 2.5= 2.5.1= 2.5.2= 2.5.3= 2.5.4= 2.5.5`	No fix yet

Description

Unspecified vulnerability in Positive Software Corporation CP+ (cpplus) before 2.5.5 allows attackers to have unknown impact and attack vectors, related to "a possible security flaw caused by a bug in Perl." NOTE: unless CP+ includes its own copy of Perl with CVE-2005-3962, this is a different vulnerability than CVE-2005-3962; however, there is insufficient information to be sure.

References

cpplus.info/feature_25.html · Patch
secunia.com/advisories/17975 · Patch
secunia.com/advisories/18005 · Patch
securityfocus.com/bid/15799
trustix.org/errata/2005/0068 · Vendor Advisory
vupen.com/english/advisories/2005/2828

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free