CVE-2007-5413

Published: Oct 29, 2007Modified: Apr 23, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

httpd.tkd in Radia Integration Server in Hewlett-Packard (HP) OpenView Configuration Management (CM) Infrastructure 4.0 through 4.2i and Client Configuration Manager (CCM) 2.0 allows remote attackers to read arbitrary files via URLs containing tilde (~) references to home directories, as demonstrated by ~root.

Affected (21)

Products: Hp: Openview Client Configuraton Manager, Openview Configuration Management

2 products

Openview Client Configuraton Manager

Openview Configuration Management

Configuration A

21 vulnerable

Vulnerable Software	Affected Versions
Hp Openview Client Configuraton Manager	Version 2.0
Hp Openview Configuration Management	Version 4.0
Hp Openview Configuration Management	Version 4.0
Hp Openview Configuration Management	Version 4.0
Hp Openview Configuration Management	Version 4.0
Hp Openview Configuration Management	Version 4.0
Hp Openview Configuration Management	Version 4.1
Hp Openview Configuration Management	Version 4.1
Hp Openview Configuration Management	Version 4.1
Hp Openview Configuration Management	Version 4.1
Hp Openview Configuration Management	Version 4.1
Hp Openview Configuration Management	Version 4.2
Hp Openview Configuration Management	Version 4.2
Hp Openview Configuration Management	Version 4.2
Hp Openview Configuration Management	Version 4.2
Hp Openview Configuration Management	Version 4.2
Hp Openview Configuration Management	Version 4.2i
Hp Openview Configuration Management	Version 4.2i
Hp Openview Configuration Management	Version 4.2i
Hp Openview Configuration Management	Version 4.2i
Hp Openview Configuration Management	Version 4.2i