Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.2

HP System Management Homepage lets local users access data

CVE-2008-4413 · published 18 years ago
Summary

The HP System Management Homepage on certain HP-UX versions can be tricked by someone with local access to read or change information they shouldn’t see. This happens because temporary files may be created with overly permissive settings. Apply the latest HP patches or restrict local user permissions to mitigate the risk.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
hp system_management_homepage <= 2.2.6
2.0.0
2.0.1
2.0.2
2.1
2.1.0-103
2.1.0-103\(a\)
2.1.0-109
2.1.0-118
2.1.1
2.1.2
2.1.2-127
22 more version ranges
cpe:2.3:a:hp:system_management_homepage:*:*:*:*:*:*:*:*
Original advisory text
Unspecified vulnerability in HP System Management Homepage (SMH) 2.2.6 and earlier on HP-UX B.11.11 and B.11.23, and SMH 2.2.6 and 2.2.8 and earlier on HP-UX B.11.23 and B.11.31, allows local users...
Unspecified vulnerability in HP System Management Homepage (SMH) 2.2.6 and earlier on HP-UX B.11.11 and B.11.23, and SMH 2.2.6 and 2.2.8 and earlier on HP-UX B.11.23 and B.11.31, allows local users to gain "unauthorized access" via unknown vectors, possibly related to temporary file permissions.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
6.2 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-264Permissions, Privileges, and Access Controls
Timeline
Published4 Nov 2008
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2008-4413 · NVD
Track software like this
Free during beta