ID CVE-2009-0719
Summary Unspecified vulnerability in useradd in HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to access arbitrary files and directories via unknown vectors, a different issue than CVE-2008-1660.
References
Vulnerable Configurations
  • cpe:2.3:o:hp:hp-ux:b.11.11:*:*:*:*:*:*:*
    cpe:2.3:o:hp:hp-ux:b.11.11:*:*:*:*:*:*:*
  • cpe:2.3:o:hp:hp-ux:b.11.23:*:*:*:*:*:*:*
    cpe:2.3:o:hp:hp-ux:b.11.23:*:*:*:*:*:*:*
  • cpe:2.3:o:hp:hp-ux:b.11.31:*:*:*:*:*:*:*
    cpe:2.3:o:hp:hp-ux:b.11.31:*:*:*:*:*:*:*
CVSS
Base: 6.0 (as of 29-09-2017 - 01:33)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
LOCAL MEDIUM SINGLE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE NONE
cvss-vector via4 AV:L/AC:M/Au:S/C:C/I:C/A:N
oval via4
accepted 2015-04-20T04:02:27.854-04:00
class vulnerability
contributors
  • name Pai Peng
    organization Hewlett-Packard
  • name Sushant Kumar Singh
    organization Hewlett-Packard
  • name Sushant Kumar Singh
    organization Hewlett-Packard
  • name Prashant Kumar
    organization Hewlett-Packard
  • name Mike Cokus
    organization The MITRE Corporation
description Unspecified vulnerability in useradd in HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to access arbitrary files and directories via unknown vectors, a different issue than CVE-2008-1660.
family unix
id oval:org.mitre.oval:def:5791
status accepted
submitted 2009-04-29T14:29:56.000-04:00
title HPUX Running useradd(1M), Local Unauthorized Access
version 42
refmap via4
bid 34748
hp
  • HPSBUX02366
  • SSRT080120
Last major update 29-09-2017 - 01:33
Published 29-04-2009 - 15:30
Back to Top