Lucene search
HistoryDec 31, 2004 - 5:00 a.m.
CVE-2004-0952
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
6.7 Medium
AI Score
Confidence
High
0.04 Low
EPSS
Percentile
92.1%
HP-UX B.11.00 through B.11.23, when running Ignite-UX and using the add_new_client command, causes the TFTP server to set world-writable permissions on part of the directory tree, which allows remote attackers to modify data or cause disk consumption.
Affected configurations
Node
hphp-uxMatch11.00
ORhphp-uxMatch11.11
ORhphp-uxMatch11.22
ORhphp-uxMatch11.23ia64_64-bit
Related
openvas
openvas
TFTP directory permissions (HP Ignite-UX)
2006-03-26 00:00:00
HP-UX Update for Ignite-UX HPSBUX01219
2009-05-05 00:00:00
cve
cve
CVE-2004-0952
2005-08-19 04:00:00
cvelist
cvelist
CVE-2004-0952
2005-08-19 04:00:00
nessus
nessus
HP-UX Ignite-UX TFTP Service Remote File Manipulation
2005-08-26 00:00:00
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
6.7 Medium
AI Score
Confidence
High
0.04 Low
EPSS
Percentile
92.1%
Related for NVD:CVE-2004-0952