Description
HP System Management Homepage (SMH) before 2.1.9 for Linux, when used with Novell eDirectory, assigns the eDirectory members to the root group, which allows remote authenticated eDirectory users to gain privileges.
References (7)
Core 7
Core References
Vendor Advisory vendor-advisory
x_refsource_hp
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01072894
Patch vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/24486
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/34900
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2007/2232
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/37513
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id?1018256
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/25689
Scores
EPSS
0.0042
EPSS Percentile
62.3%
Details
Status
published
Products (1)
hp/system_management_homepage
< 2.1.8
Published
Jun 19, 2007
Tracked Since
Feb 18, 2026