CVE-2005-4505: McAfee Common Management Agent

High severity, CVSS 7.2. EPSS: 1% chance of exploitation in the next 30 days.

Unquoted Windows search path vulnerability in McAfee VirusScan Enterprise 8.0i (patch 11) and CMA 3.5 (patch 5) might allow local users to gain privileges via a malicious "program.exe" file in the C: folder, which is run by naPrdMgr.exe when it attempts to execute EntVUtil.EXE under an unquoted "Program Files" path.

Affected products

  • McAfee Common Management Agent: version 3.5 only
  • McAfee Virusscan Enterprise: version 8.0i only

Published 2005-12-23. Last modified 2026-06-16.