CVE-2004-0951

HIGH 7.5CVE-2004-0951 · Published 31/12/2004 · updated 16/06/2026

In short

CVE-2004-0951 is a HIGH (CVSS 7.5) vulnerability affecting ignite-ux (hp).
Chance of exploitation in the next 30 days (EPSS): 4.5%, higher than 91.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ignite-ux hp	`= c.6.2.241`	No fix yet

Description

The make_recovery command for the TFTP server in HP Ignite-UX before C.6.2.241 makes a copy of the password file in the TFTP directory tree, which allows remote attackers to obtain sensitive information.

References

secunia.com/advisories/16456 · Patch
securitytracker.com/id
corsaire.com/advisories/c041123-001.txt · Exploit
securityfocus.com/bid/14568
exchange.xforce.ibmcloud.com/vulnerabilities/21858

More vulnerabilities in ignite-ux

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free