Unscored severity · published Dec 31, 2004
CVE-2004-0951
The make_recovery command for the TFTP server in HP Ignite-UX before C.6.2.241 makes a copy of the password file in the TFTP directory tree, which allows remote attackers to…
–
CVSS
4.5%
EPSS
No
On KEV
Description
The make_recovery command for the TFTP server in HP Ignite-UX before C.6.2.241 makes a copy of the password file in the TFTP directory tree, which allows remote attackers to obtain sensitive information.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.5% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IG
Ignite-ux · HP
c.6.2.241 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0951
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0951
Patch
http://secunia.com/advisories/16456/
securitytracker.com
http://securitytracker.com/id?1014711
Exploit
http://www.corsaire.com/advisories/c041123-001.txt
www.securityfocus.com
http://www.securityfocus.com/bid/14568
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/21858
More from Ignite-ux
–
CVE-2007-4590
The get_system_info command in Ignite-UX C.7.0 through C.7.3, and DynRootDisk (DRD) A.1.0.16.417 through A.2.0.0.592, on HP-UX B.11.11, B.11.23, and B.11.31 does not inform local…