VulnerabilityModified
CVE-2007-3260
HP System Management Homepage (SMH) before 2.1.9 for Linux, when used with Novell eDirectory, assigns the eDirectory members to the root group, which allows remote authenticated eDirectory users to gain privileges.
HIGH 9.0EPSS 3.83%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (3.83%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
HP System Management Homepage (SMH) before 2.1.9 for Linux, when used with Novell eDirectory, assigns the eDirectory members to the root group, which allows remote authenticated eDirectory users to gain privileges.
- CVSS 2.0
- 9.0 HIGHAV:N/AC:L/Au:S/C:C/I:C/A:C
- EPSS
- 3.83% probability · 89th percentile
- CISA KEV
- Not listed
- Affected
- hp/system management homepage
- Source
- cve@mitre.org
References
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01072894
- http://osvdb.org/37513
- http://secunia.com/advisories/25689Vendor Advisory
- http://www.securityfocus.com/bid/24486Patch
- http://www.securitytracker.com/id?1018256
- http://www.vupen.com/english/advisories/2007/2232
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34900
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01072894
- http://osvdb.org/37513
- http://secunia.com/advisories/25689Vendor Advisory
- http://www.securityfocus.com/bid/24486Patch
- http://www.securitytracker.com/id?1018256
- http://www.vupen.com/english/advisories/2007/2232
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34900
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.