3.3

CVE-2007-4590

The get_system_info command in Ignite-UX C.7.0 through C.7.3, and DynRootDisk (DRD) A.1.0.16.417 through A.2.0.0.592, on HP-UX B.11.11, B.11.23, and B.11.31 does not inform local users of networking changes made by the command, which has unknown impact and attack vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hp ≫ Dynrootdisk Versiona.1.0.16.417
   Hp ≫ Hp-ux Version11.23
   Hp ≫ Hp-ux Version11.31
Hp ≫ Dynrootdisk Versiona.1.0.18.245
   Hp ≫ Hp-ux Version11.23
   Hp ≫ Hp-ux Version11.31
Hp ≫ Dynrootdisk Versiona.1.1.0.344
   Hp ≫ Hp-ux Version11.23
   Hp ≫ Hp-ux Version11.31
Hp ≫ Dynrootdisk Versiona.2.0.0.592
   Hp ≫ Hp-ux Version11.23
   Hp ≫ Hp-ux Version11.31
Hp ≫ Hp-ux Version11.11
Hp ≫ Hp-ux Version11.23
Hp ≫ Hp-ux Version11.31
Hp ≫ Ignite-ux Versionc.7.0.212
Hp ≫ Ignite-ux Versionc.7.1.92
Hp ≫ Ignite-ux Versionc.7.2.93
Hp ≫ Ignite-ux Versionc.7.3.144
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.4% 0.318
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 3.3 3.4 4.9
AV:L/AC:M/Au:N/C:N/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118367
http://osvdb.org/37563
http://secunia.com/advisories/26599
Patch
Vendor Advisory
http://securitytracker.com/id?1018607
http://www.securityfocus.com/bid/25469
http://www.vupen.com/english/advisories/2007/2985
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5515