CVE-2007-3260

HP System Management Homepage (SMH) before 2.1.9 for Linux, when used with Novell eDirectory, assigns the eDirectory members to the root group, which allows remote authenticated eDirectory users to gain privileges.

Link	Resource
http://www.securityfocus.com/bid/24486	Patch
http://www.securitytracker.com/id?1018256
http://secunia.com/advisories/25689	Vendor Advisory
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01072894
http://www.vupen.com/english/advisories/2007/2232
http://osvdb.org/37513
https://exchange.xforce.ibmcloud.com/vulnerabilities/34900

Configuration 1

cpe:2.3:a:hp:system_management_homepage:*:*:*:*:*:*:*:*

---

Published : 2007-06-19 06:30

Updated : 2017-07-29 01:32

---

NVD link : CVE-2007-3260

Mitre link : CVE-2007-3260

No products.

CWE-842

Placement of User into Incorrect Group