What’s Vulnerable › Vulnerabilities
CVE-2008-3539
- Severity: low (CVSS 2.1 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2008-09-11 · updated 2026-06-16
- Weakness: CWE-200
Description
Unspecified vulnerability in HP OpenView Select Identity (HPSI) Connectors on Windows, as used in HPSI Active Directory Connector 2.30 and earlier, HPSI SunOne Connector 1.14 and earlier, HPSI eDirectory Connector 1.12 and earlier, HPSI eTrust Connector 1.02 and earlier, HPSI OID Connector 1.02 and earlier, HPSI IBM Tivoli Dir Connector 1.02 and earlier, HPSI TOPSecret Connector 2.22.001 and earlier, HPSI RACF Connector 1.12.001 and earlier, HPSI ACF2 Connector 1.02 and earlier, HPSI OpenLDAP Connector 1.02 and earlier, and HPSI BiDir DirX Connector 1.00.003 and earlier, allows local users to obtain sensitive information via unknown vectors.
Affected products
- Hpsi Acf2 Connector: through 1.02
- Hpsi Active Directory Connector: through 1.70.003; through 2.10.002; through 2.20; through 2.30
- Hpsi Bidir Dirx Connector: through 1.00.003
- Hpsi Edirectory Connector: through 1.12
- Hpsi Etrust Connector: through 1.02
- Hpsi Oid Connector: through 1.02
- Hpsi Openldap Connector: through 1.02
- Hpsi Racf Connector: through 1.12.001
- Hpsi Sunone Connector: through 1.14
- Hpsi Topsecret Connector: through 2.22.001
- HP Ibm Tivoli Dir Connector: through 1.02
References
- http://marc.info/?l=bugtraq&m=122062779731581&w=2
- http://secunia.com/advisories/31764
- http://securityreason.com/securityalert/4236
- http://securitytracker.com/id?1020821
- http://www.securityfocus.com/bid/31024
- http://www.vupen.com/english/advisories/2008/2501
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44916
- http://marc.info/?l=bugtraq&m=122062779731581&w=2
- http://secunia.com/advisories/31764
- http://securityreason.com/securityalert/4236
- http://securitytracker.com/id?1020821
- http://www.securityfocus.com/bid/31024
Get alerted when CVE-2008-3539 or the next vulnerability affects your stack