Unscored severity · published Nov 4, 2006
CVE-2006-5704
HP NonStop Server G06.29, when running Standard Security T6533G06 before T6533G06^ABK, does not properly evaluate access permissions to OSS directories when no optional ACL entry…
–
CVSS
0.4%
EPSS
No
On KEV
Description
HP NonStop Server G06.29, when running Standard Security T6533G06 before T6533G06^ABK, does not properly evaluate access permissions to OSS directories when no optional ACL entry exists, which allows local users to read arbitrary files.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 39% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NS
Nonstop Server · HP
g06.29 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-5704
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-5704
securitytracker.com
http://securitytracker.com/id?1017135
Vendor Advisory
http://www.ciac.org/ciac/bulletins/r-027.shtml
www.securityfocus.com
http://www.securityfocus.com/bid/20824
www.vupen.com
http://www.vupen.com/english/advisories/2006/4301
www2.itrc.hp.com
http://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00795238
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/29951
More from Nonstop Server
–
CVE-2012-3280
Multiple unspecified vulnerabilities on HP NonStop Servers H06.x and J06.x allow remote authenticated users to obtain sensitive information, modify data, or cause a denial of…
–
CVE-2011-2411
Unspecified vulnerability on HP NonStop Servers with software H06.x through H06.23.00 and J06.x through J06.12.00, when Samba is used, allows remote authenticated users to execute…
–
CVE-2009-2686
Unspecified vulnerability in HP NonStop G06.12.00 through G06.32.00, H06.08.00 through H06.18.01, and J06.04.00 through J06.07.01 allows local users to gain privileges, cause a…
–
CVE-2009-2678
Unspecified vulnerability in Open System Services (OSS) Name Server on HP NonStop G06.27, G06.28, G06.29, G06.30, H06.06, H06.07, H06.08, and J06.03 allows remote attackers to…