CVE

Id
9379  
CVE No.
CVE-2004-0951  
Status
Candidate  
Description
The make_recovery command for the TFTP server in HP Ignite-UX before C.6.2.241 makes a copy of the password file in the TFTP directory tree, which allows remote attackers to obtain sensitive information.  
Phase
Assigned (20041013)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
62565 9379 CVE-2004-0951 MISC:http://www.corsaire.com/advisories/c041123-001.txt  View
62566 9379 CVE-2004-0951 BID:14568  View
62567 9379 CVE-2004-0951 URL:http://www.securityfocus.com/bid/14568  View
62568 9379 CVE-2004-0951 SECTRACK:1014711  View
62569 9379 CVE-2004-0951 URL:http://securitytracker.com/id?1014711  View
62570 9379 CVE-2004-0951 SECUNIA:16456  View
62571 9379 CVE-2004-0951 URL:http://secunia.com/advisories/16456/  View
62572 9379 CVE-2004-0951 XF:hpigniteux-makerecovery-bypass-security(21858)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62288 JVNDB-2005-000490 HP Ignite-UX におけるサービス運用妨害 (DoS) の脆弱性 HP-UX 上で使用する管理ツール Ignite-UX C.6.2.241 未満には、add_new_client コマンドの処理に不備が存在するため、TFTP サーバのディレクトリツリーの一部に対してすべてのユーザが書き込み可能となる脆弱性が存在します。 CVE-2004-0952 9379 6.4 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000490.html  View