Description
The make_recovery command for the TFTP server in HP Ignite-UX before C.6.2.241 makes a copy of the password file in the TFTP directory tree, which allows remote attackers to obtain sensitive information.
References
- http://www.corsaire.com/advisories/c041123-001.txt
- 14568 vdb-entry
- 16456 third-party-advisory
- 1014711 vdb-entry
- hpigniteux-makerecovery-bypass-security(21858) vdb-entry