Vulnerabilities > CVE-2007-3260 - Remote Privilege Escalation vulnerability in HP System Management Homepage

CVSS 9.0 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

SINGLE

Confidentiality impact

COMPLETE

Integrity impact

COMPLETE

Availability impact

COMPLETE

network

low complexity

critical

NVD

Published: 2007-06-19

Updated: 2017-07-29

Summary

HP System Management Homepage (SMH) before 2.1.9 for Linux, when used with Novell eDirectory, assigns the eDirectory members to the root group, which allows remote authenticated eDirectory users to gain privileges.

Vulnerable Configurations

Part	Description	Count
Application	Hp HP System Management Homepage - HP System Management Homepage 2.0.0 HP System Management Homepage 2.0.1 HP System Management Homepage 2.0.1.104 HP System Management Homepage 2.0.2 HP System Management Homepage 2.0.2.106 HP System Management Homepage 2.1 HP System Management Homepage 2.1.0-103 HP System Management Homepage 2.1.0-103\(A\) HP System Management Homepage 2.1.0-109 HP System Management Homepage 2.1.0-118 HP System Management Homepage 2.1.0.121 HP System Management Homepage 2.1.1 HP System Management Homepage 2.1.2 HP System Management Homepage 2.1.2-127 HP System Management Homepage 2.1.2.127 HP System Management Homepage 2.1.3 HP System Management Homepage 2.1.3.132 HP System Management Homepage 2.1.4 HP System Management Homepage 2.1.4-143 HP System Management Homepage 2.1.4.143 HP System Management Homepage 2.1.5 HP System Management Homepage 2.1.5-146 HP System Management Homepage 2.1.5.146 HP System Management Homepage 2.1.6 HP System Management Homepage 2.1.6-156 HP System Management Homepage 2.1.6.156 HP System Management Homepage 2.1.7 HP System Management Homepage 2.1.7-168 HP System Management Homepage 2.1.7.168 HP System Management Homepage 2.1.8	32

Summary

Vulnerable Configurations

References