CVE-2007-3260

high

Description

HP System Management Homepage (SMH) before 2.1.9 for Linux, when used with Novell eDirectory, assigns the eDirectory members to the root group, which allows remote authenticated eDirectory users to gain privileges.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/34900

http://www.vupen.com/english/advisories/2007/2232

http://www.securitytracker.com/id?1018256

http://www.securityfocus.com/bid/24486

http://secunia.com/advisories/25689

http://osvdb.org/37513

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01072894

Details

Source: Mitre, NVD

Published: 2007-06-19

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 9

Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H