Lucene search

[email protected]CVE-2007-5413

HistoryOct 29, 2007 - 10:46 p.m.

CVE-2007-5413

2007-10-2922:46:00

CWE-200

[email protected]

web.nvd.nist.gov

cve-2007-5413

information security

vulnerability

hewlett-packard

hp openview

configuration management

cm infrastructure

client configuration manager

ccm

remote attack

file read

nvd

6.8 Medium

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

0.017 Low

EPSS

Percentile

87.5%

JSON

httpd.tkd in Radia Integration Server in Hewlett-Packard (HP) OpenView Configuration Management (CM) Infrastructure 4.0 through 4.2i and Client Configuration Manager (CCM) 2.0 allows remote attackers to read arbitrary files via URLs containing tilde (~) references to home directories, as demonstrated by ~root.

CPENameOperatorVersion
hp:openview_configuration_managementhp openview configuration managementeq4.0
hp:openview_configuration_managementhp openview configuration managementeq4.1
hp:openview_configuration_managementhp openview configuration managementeq4.2i
hp:openview_configuration_managementhp openview configuration managementeq4.2
hp:openview_client_configuraton_managerhp openview client configuraton managereq2.0

CPE	Name	Operator	Version
hp:openview_configuration_management	hp openview configuration management	eq	4.0
hp:openview_configuration_management	hp openview configuration management	eq	4.1
hp:openview_configuration_management	hp openview configuration management	eq	4.2i
hp:openview_configuration_management	hp openview configuration management	eq	4.2
hp:openview_client_configuraton_manager	hp openview client configuraton manager	eq	2.0

References

h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01205079

osvdb.org/39528

secunia.com/advisories/27341

www.securityfocus.com/archive/1/483106/100/100/threaded

www.securitytracker.com/id?1018858

www.vupen.com/english/advisories/2007/3620

www.zerodayinitiative.com/advisories/ZDI-07-060.html

exchange.xforce.ibmcloud.com/vulnerabilities/37400

6.8 Medium

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

0.017 Low

EPSS

Percentile

87.5%

JSON

Related for CVE-2007-5413

securityvulns4 zdi1 prion1