FKIE_CVE-2008-3539

Vulnerability from fkie_nvd - Published: 2008-09-11 01:12 - Updated: 2026-06-16 22:56
Severity
Summary
Unspecified vulnerability in HP OpenView Select Identity (HPSI) Connectors on Windows, as used in HPSI Active Directory Connector 2.30 and earlier, HPSI SunOne Connector 1.14 and earlier, HPSI eDirectory Connector 1.12 and earlier, HPSI eTrust Connector 1.02 and earlier, HPSI OID Connector 1.02 and earlier, HPSI IBM Tivoli Dir Connector 1.02 and earlier, HPSI TOPSecret Connector 2.22.001 and earlier, HPSI RACF Connector 1.12.001 and earlier, HPSI ACF2 Connector 1.02 and earlier, HPSI OpenLDAP Connector 1.02 and earlier, and HPSI BiDir DirX Connector 1.00.003 and earlier, allows local users to obtain sensitive information via unknown vectors.
References
cve@mitre.orghttp://marc.info/?l=bugtraq&m=122062779731581&w=2Patch
cve@mitre.orghttp://secunia.com/advisories/31764
cve@mitre.orghttp://securityreason.com/securityalert/4236
cve@mitre.orghttp://securitytracker.com/id?1020821
cve@mitre.orghttp://www.securityfocus.com/bid/31024
cve@mitre.orghttp://www.vupen.com/english/advisories/2008/2501
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/44916
af854a3a-2127-422b-91ae-364da2661108http://marc.info/?l=bugtraq&m=122062779731581&w=2Patch
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/31764
af854a3a-2127-422b-91ae-364da2661108http://securityreason.com/securityalert/4236
af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1020821
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/31024
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2008/2501
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/44916
Impacted products
Vendor Product Version
hp hpsi_acf2_connector *
hp hpsi_active_directory_connector *
hp hpsi_active_directory_connector *
hp hpsi_active_directory_connector *
hp hpsi_active_directory_connector *
hp hpsi_bidir_dirx_connector *
hp hpsi_edirectory_connector *
hp hpsi_etrust_connector *
hp hpsi_oid_connector *
hp hpsi_openldap_connector *
hp hpsi_racf_connector *
hp hpsi_sunone_connector *
hp hpsi_topsecret_connector *
hp ibm_tivoli_dir_connector *
microsoft windows *
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:hp:hpsi_acf2_connector:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2ADE02FF-E7E9-421D-BB22-F8F0523042DE",
              "versionEndIncluding": "1.02",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:hp:hpsi_active_directory_connector:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C9ACA531-E06C-4494-8E5D-694433316DBF",
              "versionEndIncluding": "1.70.003",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:hp:hpsi_active_directory_connector:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "67B9BAB4-4BE9-401B-93CB-1060D9DA58CD",
              "versionEndIncluding": "2.10.002",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:hp:hpsi_active_directory_connector:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "4E963EBC-C8BD-4308-A8E1-1752A9C3636E",
              "versionEndIncluding": "2.20",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:hp:hpsi_active_directory_connector:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0AAEE616-803B-4DA6-83BB-F8492242FB0A",
              "versionEndIncluding": "2.30",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:hp:hpsi_bidir_dirx_connector:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "04BCD03A-532D-4CD1-AD29-10976C3A3CF9",
              "versionEndIncluding": "1.00.003",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:hp:hpsi_edirectory_connector:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E3338660-1EAE-4B48-9F0C-953D5118E80C",
              "versionEndIncluding": "1.12",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:hp:hpsi_etrust_connector:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "5E27C72C-6424-40CB-8917-16171ADCE94F",
              "versionEndIncluding": "1.02",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:hp:hpsi_oid_connector:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "87DDF395-56F8-47C3-9BC9-732753264763",
              "versionEndIncluding": "1.02",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:hp:hpsi_openldap_connector:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "3BE6B800-0DC9-46C5-BE8C-A9C30C68C5BE",
              "versionEndIncluding": "1.02",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:hp:hpsi_racf_connector:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "BD712946-8B98-495E-AC83-DA897ED15D46",
              "versionEndIncluding": "1.12.001",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:hp:hpsi_sunone_connector:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "4E61EBB8-B01B-4940-9778-6EC3CC9FEC73",
              "versionEndIncluding": "1.14",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:hp:hpsi_topsecret_connector:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2FE48EC3-A4C7-439A-8719-392652668087",
              "versionEndIncluding": "2.22.001",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:hp:ibm_tivoli_dir_connector:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "ECC89FFF-169B-42B5-AB16-577F32C13EC5",
              "versionEndIncluding": "1.02",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in HP OpenView Select Identity (HPSI) Connectors on Windows, as used in HPSI Active Directory Connector 2.30 and earlier, HPSI SunOne Connector 1.14 and earlier, HPSI eDirectory Connector 1.12 and earlier, HPSI eTrust Connector 1.02 and earlier, HPSI OID Connector 1.02 and earlier, HPSI IBM Tivoli Dir Connector 1.02 and earlier, HPSI TOPSecret Connector 2.22.001 and earlier, HPSI RACF Connector 1.12.001 and earlier, HPSI ACF2 Connector 1.02 and earlier, HPSI OpenLDAP Connector 1.02 and earlier, and HPSI BiDir DirX Connector 1.00.003 and earlier, allows local users to obtain sensitive information via unknown vectors."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad sin especificar en  HP OpenView Select Identity (HPSI) Connectors  sobre Windows, utilizado en HPSI Active Directory Connector 2.30 y anteriores, HPSI SunOne Connector 1.14 y anteriores, HPSI eDirectory Connector 1.12 y anteriores, HPSI eTrust Connector 1.02 y anteriores, HPSI OID Connector 1.02 y anteriores, HPSI IBM Tivoli Dir Connector 1.02 y anteriores, HPSI TOPSecret Connector 2.22.001 y anteriores, HPSI RACF Connector 1.12.001 y anteriores, HPSI ACF2 Connector 1.02 y anteriores, HPSI OpenLDAP Connector 1.02 y anteriores, and HPSI BiDir DirX Connector 1.00.003 y anteriores, permite a ausuarios locales obtener informaci\u00f3n sensible a trav\u00e9s de vectores no especificados."
    }
  ],
  "id": "CVE-2008-3539",
  "lastModified": "2026-06-16T22:56:00.990",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "LOW",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 2.1,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "NONE",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2008-09-11T01:12:57.853",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "http://marc.info/?l=bugtraq\u0026m=122062779731581\u0026w=2"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/31764"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://securityreason.com/securityalert/4236"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://securitytracker.com/id?1020821"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/31024"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2008/2501"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44916"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://marc.info/?l=bugtraq\u0026m=122062779731581\u0026w=2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/31764"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securityreason.com/securityalert/4236"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securitytracker.com/id?1020821"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/31024"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2008/2501"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44916"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.