VULNERABILITY INTELLIGENCE

CVE-2004-0952

CVSS score6.4 NONE
EPSS probability4.61%
CISA KEVNot currently listed
Published2004-12-31
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:P

Description

HP-UX B.11.00 through B.11.23, when running Ignite-UX and using the add_new_client command, causes the TFTP server to set world-writable permissions on part of the directory tree, which allows remote attackers to modify data or cause disk consumption.

Weakness classification

  • nvd@nist.gov: NVD-CWE-Other

Primary references