CVE-2007-5008

HP-UX B.11.11 B.11.23 B.11.31 - Improper Authentication via logins Command

Title source: llm
STIX 2.1

Description

The logins command in HP-UX B.11.31, B.11.23, and B.11.11 does not correctly report password status, which allows remote attackers to obtain privileges when certain "password issues" are not detected.

References (7)

Core 7
Core References
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5779
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/26873
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1018709
Various Sources vendor-advisory x_refsource_hp
https://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c01167886
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/3230
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/36702
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/25740

Scores

EPSS 0.0114
EPSS Percentile 78.6%

Details

CWE
CWE-287
Status published
Products (3)
hp/hp-ux 11.11
hp/hp-ux 11.23
hp/hp-ux 11.31
Published Sep 20, 2007
Tracked Since Feb 18, 2026