CVE-2008-4413 : Unspecified vulnerability in HP System Management Homepage (SMH) 2.2.6 and earli

Unspecified vulnerability in HP System Management Homepage (SMH) 2.2.6 and earlier on HP-UX B.11.11 and B.11.23, and SMH 2.2.6 and 2.2.8 and earlier on HP-UX B.11.23 and B.11.31, allows local users to gain "unauthorized access" via unknown vectors, possibly related to temporary file permissions.

Published 2008-11-04 18:29:48

Updated 2025-04-09 00:30:58

Source MITRE

View at NVD, CVE.org

Vulnerability category: Bypass

Products affected by CVE-2008-4413

HP » System Management Homepage
Versions up to, including, (<=) 2.2.8
cpe:2.3:a:hp:system_management_homepage:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » Hp-ux » Version: 11.11
When used together with: HP » Hp-ux » Version: 11.23
When used together with: HP » Hp-ux » Version: 11.31
HP » System Management Homepage
Versions up to, including, (<=) 2.2.6
cpe:2.3:a:hp:system_management_homepage:*:*:*:*:*:*:*:*
Matching versions
When used together with: HP » Hp-ux » Version: 11.11
When used together with: HP » Hp-ux » Version: 11.23
HP » System Management Homepage » Version: 2.0.0
cpe:2.3:a:hp:system_management_homepage:2.0.0:*:*:*:*:*:*:*
Matching versions
When used together with: HP » Hp-ux » Version: 11.11
When used together with: HP » Hp-ux » Version: 11.23
HP » System Management Homepage » Version: 2.1.4
cpe:2.3:a:hp:system_management_homepage:2.1.4:*:*:*:*:*:*:*
Matching versions
When used together with: HP » Hp-ux » Version: 11.11
When used together with: HP » Hp-ux » Version: 11.23
HP » System Management Homepage » Version: 2.1.3.132
cpe:2.3:a:hp:system_management_homepage:2.1.3.132:*:*:*:*:*:*:*
Matching versions
When used together with: HP » Hp-ux » Version: 11.11
When used together with: HP » Hp-ux » Version: 11.23
HP » System Management Homepage » Version: 2.1
cpe:2.3:a:hp:system_management_homepage:2.1:*:*:*:*:*:*:*
Matching versions
When used together with: HP » Hp-ux » Version: 11.11
When used together with: HP » Hp-ux » Version: 11.23
HP » System Management Homepage » Version: 2.1.1
cpe:2.3:a:hp:system_management_homepage:2.1.1:*:*:*:*:*:*:*
Matching versions
When used together with: HP » Hp-ux » Version: 11.11
When used together with: HP » Hp-ux » Version: 11.23
HP » System Management Homepage » Version: 2.0.1
cpe:2.3:a:hp:system_management_homepage:2.0.1:*:*:*:*:*:*:*
Matching versions
When used together with: HP » Hp-ux » Version: 11.11
When used together with: HP » Hp-ux » Version: 11.23
HP » System Management Homepage » Version: 2.0.2
cpe:2.3:a:hp:system_management_homepage:2.0.2:*:*:*:*:*:*:*
Matching versions
When used together with: HP » Hp-ux » Version: 11.11
When used together with: HP » Hp-ux » Version: 11.23
HP » System Management Homepage » Version: 2.1.5
cpe:2.3:a:hp:system_management_homepage:2.1.5:*:*:*:*:*:*:*
Matching versions
When used together with: HP » Hp-ux » Version: 11.11
When used together with: HP » Hp-ux » Version: 11.23
HP » System Management Homepage » Version: 2.1.6
cpe:2.3:a:hp:system_management_homepage:2.1.6:*:*:*:*:*:*:*
Matching versions
When used together with: HP » Hp-ux » Version: 11.11
When used together with: HP » Hp-ux » Version: 11.23
HP » System Management Homepage » Version: 2.1.7
cpe:2.3:a:hp:system_management_homepage:2.1.7:*:*:*:*:*:*:*
Matching versions
When used together with: HP » Hp-ux » Version: 11.11
When used together with: HP » Hp-ux » Version: 11.23
HP » System Management Homepage » Version: 2.1.8
cpe:2.3:a:hp:system_management_homepage:2.1.8:*:*:*:*:*:*:*
Matching versions
When used together with: HP » Hp-ux » Version: 11.11
When used together with: HP » Hp-ux » Version: 11.23
HP » System Management Homepage » Version: 2.1.2
cpe:2.3:a:hp:system_management_homepage:2.1.2:*:*:*:*:*:*:*
Matching versions
When used together with: HP » Hp-ux » Version: 11.11
When used together with: HP » Hp-ux » Version: 11.23
HP » System Management Homepage » Version: 2.1.3
cpe:2.3:a:hp:system_management_homepage:2.1.3:*:*:*:*:*:*:*
Matching versions
When used together with: HP » Hp-ux » Version: 11.11
When used together with: HP » Hp-ux » Version: 11.23
HP » System Management Homepage » Version: 2.1.9
cpe:2.3:a:hp:system_management_homepage:2.1.9:*:*:*:*:*:*:*
Matching versions
When used together with: HP » Hp-ux » Version: 11.11
When used together with: HP » Hp-ux » Version: 11.23
HP » System Management Homepage » Version: 2.1.11
cpe:2.3:a:hp:system_management_homepage:2.1.11:*:*:*:*:*:*:*
Matching versions
When used together with: HP » Hp-ux » Version: 11.11
When used together with: HP » Hp-ux » Version: 11.23
HP » System Management Homepage » Version: 2.1.10
cpe:2.3:a:hp:system_management_homepage:2.1.10:*:*:*:*:*:*:*
Matching versions
When used together with: HP » Hp-ux » Version: 11.11
When used together with: HP » Hp-ux » Version: 11.23
HP » System Management Homepage » Version: 2.1.6-156
cpe:2.3:a:hp:system_management_homepage:2.1.6-156:*:*:*:*:*:*:*
Matching versions
When used together with: HP » Hp-ux » Version: 11.11
When used together with: HP » Hp-ux » Version: 11.23
HP » System Management Homepage » Version: 2.1.11-197
cpe:2.3:a:hp:system_management_homepage:2.1.11-197:*:*:*:*:*:*:*
Matching versions
When used together with: HP » Hp-ux » Version: 11.11
When used together with: HP » Hp-ux » Version: 11.23
HP » System Management Homepage » Version: 2.1.4-143
cpe:2.3:a:hp:system_management_homepage:2.1.4-143:*:*:*:*:*:*:*
Matching versions
When used together with: HP » Hp-ux » Version: 11.11
When used together with: HP » Hp-ux » Version: 11.23
HP » System Management Homepage » Version: 2.1.2-127
cpe:2.3:a:hp:system_management_homepage:2.1.2-127:*:*:*:*:*:*:*
Matching versions
When used together with: HP » Hp-ux » Version: 11.11
When used together with: HP » Hp-ux » Version: 11.23
HP » System Management Homepage » Version: 2.1.8-177
cpe:2.3:a:hp:system_management_homepage:2.1.8-177:*:*:*:*:*:*:*
Matching versions
When used together with: HP » Hp-ux » Version: 11.11
When used together with: HP » Hp-ux » Version: 11.23
HP » System Management Homepage » Version: 2.1.7-168
cpe:2.3:a:hp:system_management_homepage:2.1.7-168:*:*:*:*:*:*:*
Matching versions
When used together with: HP » Hp-ux » Version: 11.11
When used together with: HP » Hp-ux » Version: 11.23
HP » System Management Homepage » Version: 2.1.0-103(a)
cpe:2.3:a:hp:system_management_homepage:2.1.0-103\(a\):*:*:*:*:*:*:*
Matching versions
When used together with: HP » Hp-ux » Version: 11.11
When used together with: HP » Hp-ux » Version: 11.23
HP » System Management Homepage » Version: 2.1.0-103
cpe:2.3:a:hp:system_management_homepage:2.1.0-103:*:*:*:*:*:*:*
Matching versions
When used together with: HP » Hp-ux » Version: 11.11
When used together with: HP » Hp-ux » Version: 11.23
HP » System Management Homepage » Version: 2.1.5-146
cpe:2.3:a:hp:system_management_homepage:2.1.5-146:*:*:*:*:*:*:*
Matching versions
When used together with: HP » Hp-ux » Version: 11.11
When used together with: HP » Hp-ux » Version: 11.23
HP » System Management Homepage » Version: 2.1.10-186
cpe:2.3:a:hp:system_management_homepage:2.1.10-186:*:*:*:*:*:*:*
Matching versions
When used together with: HP » Hp-ux » Version: 11.11
When used together with: HP » Hp-ux » Version: 11.23
HP » System Management Homepage » Version: 2.1.9-178
cpe:2.3:a:hp:system_management_homepage:2.1.9-178:*:*:*:*:*:*:*
Matching versions
When used together with: HP » Hp-ux » Version: 11.11
When used together with: HP » Hp-ux » Version: 11.23
HP » System Management Homepage » Version: 2.1.12-118
cpe:2.3:a:hp:system_management_homepage:2.1.12-118:*:*:*:*:*:*:*
Matching versions
When used together with: HP » Hp-ux » Version: 11.11
When used together with: HP » Hp-ux » Version: 11.23
HP » System Management Homepage » Version: 2.1.0-118
cpe:2.3:a:hp:system_management_homepage:2.1.0-118:*:*:*:*:*:*:*
Matching versions
When used together with: HP » Hp-ux » Version: 11.11
When used together with: HP » Hp-ux » Version: 11.23
HP » System Management Homepage » Version: 2.1.0-109
cpe:2.3:a:hp:system_management_homepage:2.1.0-109:*:*:*:*:*:*:*
Matching versions
When used together with: HP » Hp-ux » Version: 11.11
When used together with: HP » Hp-ux » Version: 11.23
HP » System Management Homepage » Version: 2.1.12-200
cpe:2.3:a:hp:system_management_homepage:2.1.12-200:*:*:*:*:*:*:*
Matching versions
When used together with: HP » Hp-ux » Version: 11.11
When used together with: HP » Hp-ux » Version: 11.23
HP » System Management Homepage » Version: 2.2.6
cpe:2.3:a:hp:system_management_homepage:2.2.6:*:*:*:*:*:*:*
Matching versions
When used together with: HP » Hp-ux » Version: 11.11
When used together with: HP » Hp-ux » Version: 11.23
When used together with: HP » Hp-ux » Version: 11.31

Exploit prediction scoring system (EPSS) score for CVE-2008-4413

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 8 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2008-4413

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
6.2	MEDIUM	AV:L/AC:L/Au:S/C:C/I:C/A:N	3.1	9.2	NIST
Access Vector: Local Access Complexity: Low Authentication: Single Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: None

CWE ids for CVE-2008-4413

CWE-264

Assigned by: nvd@nist.gov (Primary)

References for CVE-2008-4413

Jump to

Vulnerability Details : CVE-2008-4413

Products affected by CVE-2008-4413

Exploit prediction scoring system (EPSS) score for CVE-2008-4413

CVSS scores for CVE-2008-4413

CWE ids for CVE-2008-4413

References for CVE-2008-4413