CVEvulnerability
CVE-2007-3260
9.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-06-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
Description
HP System Management Homepage (SMH) before 2.1.9 for Linux, when used with Novell eDirectory, assigns the eDirectory members to the root group, which allows remote authenticated eDirectory users to gain privileges.
Affected configurations
• hp system management homepage (<= 2.1.8)
Related
Referenced by CWE · observed example (1)
- CWE-842 Placement of User into Incorrect Group weakness
References
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01072894 h20000.www2.hp.com
- http://osvdb.org/37513 osvdb.org
- http://secunia.com/advisories/25689 Vendor Advisory
- http://www.securityfocus.com/bid/24486 Patch
- http://www.securitytracker.com/id?1018256 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/2232 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34900 exchange.xforce.ibmcloud.com
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01072894 h20000.www2.hp.com
- http://osvdb.org/37513 osvdb.org
- http://secunia.com/advisories/25689 Vendor Advisory
- http://www.securityfocus.com/bid/24486 Patch
- http://www.securitytracker.com/id?1018256 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/2232 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34900 exchange.xforce.ibmcloud.com