Vulnerability in HP Dynrootdisk

CVE-2007-4590

The get_system_info command in Ignite-UX C.7.0 through C.7.3, and DynRootDisk (DRD) A.1.0.16.417 through A.2.0.0.592, on HP-UX B.11.11, B.11.23, and B.11.31 does not inform local users of networking changes made by the command, which has unknown impact and attack vectors.

EPSS: 0.004 (32.9th percentile) — read the EPSS interpretation.

Affected products

  • Hp Dynrootdisk — versions a.1.0.16.417, a.1.0.18.245, a.1.1.0.344
  • Hp Hp-ux — versions 11.23, 11.31, 11.11
  • Hp Ignite-ux — versions c.7.0.212, c.7.1.92, c.7.2.93
  • N/a — versions n/a

References