← Vulnerability feed

Vulnerability record · CVE-2008-4414 · published 7 November 2008

CVE-2008-4414: Hp tru64 permissions and access controls vulnerability

Hp · Tru64

Unspecified vulnerability in the AdvFS showfile command in HP Tru64 UNIX 5.1B-3 and 5.1B-4 allows local users to gain privileges via unspecified vectors.

7.2 CVSS 2.0 High EPSS 0.45% · top 63.8% CWE-264 · Permissions and access controls
7.2CVSS 2.0 base score
0.45%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
14References
16 Jun 2026Last modified by NVD

Description

Unspecified vulnerability in the AdvFS showfile command in HP Tru64 UNIX 5.1B-3 and 5.1B-4 allows local users to gain privileges via unspecified vectors.

AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://marc.info/?l=bugtraq&m=122600765224240&w=2
http://secunia.com/advisories/32621
http://securityreason.com/securityalert/4567
http://securitytracker.com/alerts/2008/Nov/1021152.html
http://www.securityfocus.com/bid/32160 Patch
http://www.vupen.com/english/advisories/2008/3050
https://exchange.xforce.ibmcloud.com/vulnerabilities/46414
http://marc.info/?l=bugtraq&m=122600765224240&w=2
http://secunia.com/advisories/32621
http://securityreason.com/securityalert/4567
http://securitytracker.com/alerts/2008/Nov/1021152.html
http://www.securityfocus.com/bid/32160 Patch
http://www.vupen.com/english/advisories/2008/3050
https://exchange.xforce.ibmcloud.com/vulnerabilities/46414

Track CVE-2008-4414 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2007-2791Hp tru64 vulnerabilityUnspecified vulnerability in the Secure Shell (SSH) in HP Tru64 UNIX 5.1B-4 and 5.1B-3 allows remote attackers to identify valid users via unspecifie…EPSS 6.5%10.0CVE-2003-1496Hp tru64 memory buffer overflow vulnerabilityUnspecified vulnerability in CDE dtmailpr of HP Tru64 4.0F through 5.1B allows local users to gain privileges via unknown attack vectors. NOTE: due t…EPSS 2.3%7.8CVE-2005-3670Hp jetdirect 635n vulnerabilityMultiple unspecified vulnerabilities in the Internet Key Exchange version 1 (IKEv1) implementation in HP HP-UX B.11.00, B.11.11, and B.11.23 running …EPSS 9.1%7.5CVE-2002-1604Hp-ux vulnerabilityMultiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a long NLSPATH environment variabl…EPSS 15%7.5CVE-2002-1605Hp-ux vulnerabilityBuffer overflow in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows attackers to execute arbitrary code via a long _XKB_CHARSET environment varia…EPSS 13%7.2CVE-2007-2553Hp tru64 vulnerabilityUnspecified vulnerability in dop in HP Tru64 UNIX 5.1B-4, 5.1B-3, and 5.1A PK6 allows local users to gain privileges via a large amount of data in th…EPSS 0.94%7.2CVE-2006-6418Hp tru64 memory buffer overflow vulnerabilityBuffer overflow in the POSIX Threads library (libpthread) on HP Tru64 UNIX 4.0F PK8, 4.0G PK4, and 5.1A PK6 allows local users to gain root privilege…EPSS 0.53%7.2CVE-2003-0221Hp tru64 vulnerabilityThe (1) dupatch and (2) setld utilities in HP Tru64 UNIX 5.1B PK1 and earlier allows local users to overwrite files and possibly gain root privileges…EPSS 0.47%

Source: NIST National Vulnerability Database (record CVE-2008-4414), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.