CVE-2007-3260: HP System Management Homepage

High severity, CVSS 9.0. EPSS: 3.8% chance of exploitation in the next 30 days.

HP System Management Homepage (SMH) before 2.1.9 for Linux, when used with Novell eDirectory, assigns the eDirectory members to the root group, which allows remote authenticated eDirectory users to gain privileges.

Affected products

• HP System Management Homepage: up to and including 2.1.8

Published 2007-06-19. Last modified 2026-06-16.