CVE-2004-0952 in HP-UX
Summary
by MITRE
HP-UX B.11.00 through B.11.23, when running Ignite-UX and using the add_new_client command, causes the TFTP server to set world-writable permissions on part of the directory tree, which allows remote attackers to modify data or cause disk consumption.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Analysis
by VulDB Data Team • 07/07/2025
The vulnerability identified as CVE-2004-0952 affects Hewlett-Packard Unix operating systems versions B.11.00 through B.11.23 when utilizing the Ignite-UX management tool and specifically the add_new_client command functionality. This issue represents a critical privilege escalation and data integrity vulnerability that stems from improper file permission handling within the TFTP server implementation. The flaw occurs during the execution of client addition processes where the system inadvertently grants world-writable permissions to specific directory components, creating a significant security exposure that can be exploited remotely.
The technical implementation of this vulnerability resides in the Ignite-UX add_new_client command which is designed to facilitate the addition of new client systems to an existing Ignite-UX environment. When this command executes, it fails to properly manage the permission attributes of temporary or configuration files within the TFTP server directory structure. This misconfiguration results in the creation of files or directories with overly permissive permissions, specifically allowing any user to write to these locations. The vulnerability manifests as a failure to properly implement access control mechanisms, which aligns with CWE-732 - Incorrect Permission Assignment for Critical Resources and CWE-276 - Incorrect Permission Assignment.
The operational impact of this vulnerability extends beyond simple data modification capabilities to encompass potential denial of service conditions and complete system compromise. Remote attackers can exploit this weakness to modify critical system files, inject malicious code into the TFTP server environment, or consume excessive disk space through large file uploads. The world-writable permissions create a persistent threat vector that can be leveraged for privilege escalation attacks, allowing unauthenticated users to gain unauthorized access to system resources. This vulnerability particularly affects enterprise environments where Ignite-UX is used for system deployment and management, making it a significant concern for IT security teams responsible for maintaining system integrity and availability.
Security professionals should implement immediate mitigations including updating to patched versions of HP-UX operating systems, manually correcting the directory permissions on affected systems, and monitoring network traffic for suspicious TFTP activities. The vulnerability demonstrates the importance of proper privilege separation and access control implementation in system management tools, aligning with ATT&CK technique T1068 - Exploitation for Privilege Escalation and T1499 - Endpoint Termination. Organizations should also consider implementing network segmentation to isolate TFTP services and apply the principle of least privilege to all system management functions. Regular security audits of system configuration files and permission settings should be conducted to prevent similar issues from occurring in other components of the operating system infrastructure.