Lucene search

K
cve[email protected]CVE-2004-0951
HistoryDec 31, 2004 - 5:00 a.m.

CVE-2004-0951

2004-12-3105:00:00
NVD-CWE-Other
web.nvd.nist.gov
25
cve-2004-0951
hp ignite-ux
tftp server
make_recovery command
vulnerability
nvd

6.8 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.037 Low

EPSS

Percentile

91.6%

The make_recovery command for the TFTP server in HP Ignite-UX before C.6.2.241 makes a copy of the password file in the TFTP directory tree, which allows remote attackers to obtain sensitive information.

CPENameOperatorVersion
hp:ignite-uxhp ignite-uxeqc.6.2.241

6.8 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.037 Low

EPSS

Percentile

91.6%

Related for CVE-2004-0951