CVE-2007-3260 HP System Management Homepage (SMH) before 2.1.9 for Linux, when used with Novell eDirectory, assigns the eDirectory members to the root group, which allows remote authenticated eDirectory users to ga...
HighCVSS 9.0
EPSS 3.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
HP System Management Homepage (SMH) before 2.1.9 for Linux, when used with Novell eDirectory, assigns the eDirectory members to the root group, which allows remote authenticated eDirectory users to gain privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc system management homepage | <= 2.1.8 | No fix listed |
References
- SSRT071334 vendor-advisory
- 37513 vdb-entry
- 25689 third-party-advisory vendor-advisory
- 24486 patch vdb-entry
- 1018256 vdb-entry
- ADV-2007-2232 vdb-entry
- hp-smh-edirectory-unauthorized-access(34900) vdb-entry