| Vulnerability Name: | CVE-2004-0952 (CCN-21857) | ||||||||
| Assigned: | 2004-12-31 | ||||||||
| Published: | 2004-12-31 | ||||||||
| Updated: | 2017-10-11 | ||||||||
| Summary: | HP-UX B.11.00 through B.11.23, when running Ignite-UX and using the add_new_client command, causes the TFTP server to set world-writable permissions on part of the directory tree, which allows remote attackers to modify data or cause disk consumption. | ||||||||
| CVSS v3 Severity: | 5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
| ||||||||
| CVSS v2 Severity: | 6.4 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:P)
| ||||||||
| Vulnerability Type: | CWE-Other | ||||||||
| Vulnerability Consequences: | Gain Access | ||||||||
| References: | Source: CCN Type: VulnWatch Mailing List: Tue Aug 16 2005 - 08:54:37 CDT Corsaire Security Advisory: HP Ignite-UX filesystem permissions issue Source: MITRE Type: CNA CVE-2004-0952 Source: CCN Type: Ignite-UX Product page Hewlett-Packard Co. Source: BUGTRAQ Type: UNKNOWN 20050816 Corsaire Security Advisory: HP Ignite-UX filesystem permissions issue Source: HP Type: UNKNOWN SSRT4874 Source: CCN Type: SA16456 HP Ignite-UX TFTP Service Two Vulnerabilities Source: SECUNIA Type: Patch, Vendor Advisory 16456 Source: CCN Type: SECTRACK ID: 1014711 HP-UX Ignite-UX File Permission Flaw May Let Remote Users Access and Modify Ignite-UX Client Data Source: SECTRACK Type: UNKNOWN 1014711 Source: CCN Type: CIAC Information Bulletin P-277 HP-UX Ignite-UX Remote Unauthorized Access Source: CCN Type: OSVDB ID: 18750 HP-UX Ignite-UX TFTP Service Remote File Manipulation Source: CCN Type: BID-14568 HP Ignite-UX Password File Disclosure Vulnerability Source: CCN Type: BID-14571 HP Ignite-UX TFTP File Upload Vulnerability Source: CCN Type: Hewlett-Packard Company Web site IT Resource Center - login / register Source: XF Type: UNKNOWN hpigniteux-addnewclient-gain-access(21857) Source: XF Type: UNKNOWN hpigniteux-addnewclient-gain-access(21857) Source: OVAL Type: UNKNOWN oval:org.mitre.oval:def:5775 | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| Oval Definitions | |||||||||
| |||||||||
| BACK | |||||||||