CVE-2005-1675: Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build...

Security readout for executives and security teams

This is a local information exposure issue in older Groove collaboration clients. The software reportedly installed its client directories with overly broad EVERYBODY permissions, allowing local users on the same machine to access sensitive information. The sources do not provide CVSS, active exploitation evidence, or detailed impact scope. Exposure is likely limited to endpoints or shared systems where the affected Groove clients remain installed. Risk increases where multiple local users can access the same workstation, terminal server, or legacy collaboration environment. Treat as a legacy exposure cleanup item, not an emergency based on provided evidence. Prioritize if affected Groove clients remain on shared systems, regulated workstations, or environments containing sensitive collaboration data. Mitigation focus: Inventory systems for the listed Groove Virtual Office and Groove Workspace versions.; Upgrade affected clients to the named later builds or vendor-supported replacements.; Review vendor or CERT guidance before changing permissions manually..

Prepared

Jun 29, 2026, 20:23 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.