CVE-2007-3260

Published: Jun 19, 2007Modified: Apr 23, 2026

9.0

Vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Exploitability: 8.0 / Impact: 10.0

Source: NVD

Description

HP System Management Homepage (SMH) before 2.1.9 for Linux, when used with Novell eDirectory, assigns the eDirectory members to the root group, which allows remote authenticated eDirectory users to gain privileges.

Affected (1)

Products: Hp: System Management Homepage

1 product

System Management Homepage

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Hp System Management Homepage	Up to 2.1.8

References (14)

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01072894

Source: cve@mitre.org

http://osvdb.org/37513

Source: cve@mitre.org

http://secunia.com/advisories/25689

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/24486

Source: cve@mitre.org

Patch

http://www.securitytracker.com/id?1018256

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/2232

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/34900

Source: cve@mitre.org

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01072894