CVE-2006-5782

high HPE
CVSS v3 Base Score
7.8
AV:N/AC:L/Au:N/C:N/I:N/A:C
EPSS Score
4.7%
Exploitation probability in 30 days
Top 11% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Confidentiality
None
Integrity
None
Availability
C
Published: November 9, 2006 (7126 days ago)
Last Modified: April 23, 2026
Vendor: HPE
Source: NVD

Description

radexecd.exe in HP OpenView Client Configuraton Manager (CCM) does not require authentication before executing commands in the installation directory, which allows remote attackers to cause a denial of service (reboot) by calling radbootw.exe or create arbitrary files by calling radcrecv.

CWE

NVD-CWE-Other

Affected Products

hp openview client configuraton manager

References

🔗 h20000.www2.hp.com 🔗 secunia.com 🔗 securityreason.com 🔗 securitytracker.com 🔗 www.securityfocus.com