CVE-2007-5008 The logins command in HP-UX B.11.31, B.11.23, and B.11.11 does not correctly report password status, which allows remote attackers to obtain privileges when certain "password issues" are not detected.
HighCVSS 9.0
EPSS 3.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The logins command in HP-UX B.11.31, B.11.23, and B.11.11 does not correctly report password status, which allows remote attackers to obtain privileges when certain "password issues" are not detected.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc hp-ux | = 11.11 | No fix listed |
| HP Inc hp-ux | = 11.23 | No fix listed |
| HP Inc hp-ux | = 11.31 | No fix listed |
References
- 26873 third-party-advisory vendor-advisory
- 25740 vdb-entry
- 1018709 vdb-entry
- ADV-2007-3230 vdb-entry vendor-advisory
- hpux-logins-unauthorized-access(36702) vdb-entry
- oval:org.mitre.oval:def:5779 signature vdb-entry
- HPSBUX02259 vendor-advisory