CVE-2005-3177: microsoft windows_2003_server
Vulnerability summary
CVE-2005-3177 is a medium (CVSS 4.6) vulnerability in microsoft windows_2003_server. EPSS estimates a 1.38% chance of exploitation in the next 30 days, higher than 71.7% of scored vulnerabilities.
Timeline
- 06-10-2005PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
CHKDSK in Microsoft Windows 2000 before Update Rollup 1 for SP4, Windows XP, and Windows Server 2003, when running in fix mode, does not properly handle security descriptors if the master file table contains a large number of files or if the descriptors do not satisfy certain NTFS conventions, which could cause ACLs for some files to be reverted to less secure defaults, or cause security descriptors to be removed.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
1.38%
Chance of exploitation in the next 30 days
Percentile
72%
Versus all other CVEs
30-day change
0.00 pp
From 1.38% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Microsoft1 product
1 vendor · 1 product
