CVE-2004-0952: HP HP-Ux

Medium severity, CVSS 6.4. EPSS: 4.6% chance of exploitation in the next 30 days.

HP-UX B.11.00 through B.11.23, when running Ignite-UX and using the add_new_client command, causes the TFTP server to set world-writable permissions on part of the directory tree, which allows remote attackers to modify data or cause disk consumption.

Affected products

• HP HP-Ux: version 11.00 only; version 11.11 only; version 11.22 only; version 11.23 only

Published 2004-12-31. Last modified 2026-06-16.