TI-2008-00675 Aliases CVE-2008-0708 GHSA-x9jf-g794-6pc5

HP USB 2.0 Floppy Drive Key product options (1) 442084-B21 and (2) 442085-B21 for certain…

LOW 22Published 2008-04-06 · Updated 2024-08-07

Key facts

Attack vector: Local
Privileges required: None
User interaction: — Not recorded in CVSS 2.0
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: Partial · Partial · Partial
Fix status: No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

HP USB 2.0 Floppy Drive Key product options (1) 442084-B21 and (2) 442085-B21 for certain HP ProLiant servers contain the (a) W32.Fakerecy and (b) W32.SillyFDC worms, which might be launched if the server does not have up-to-date detection.

Why it matters now

EPSS 0.00454 39th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 37

CPE	Versions	Role	Vendor
cpe:2.3:h:hp:442084-b21::::::::	all versions	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:442085-b21::::::::	all versions	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:bl20pg4:::::::*	bl20pg4	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:bl25pg2:::::::*	bl25pg2	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:bl45pg2:::::::*	bl45pg2	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:bl260c:::::::*	bl260c	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:bl460c:::::::*	bl460c	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:bl465c:::::::*	bl465c	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:bl465cg5:::::::*	bl465cg5	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:bl480c:::::::*	bl480c	Vulnerable	Hewlett Packard Enterprise

cpe:2.3:h:hp:442084-b21:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:442085-b21:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:bl20pg4:*:*:*:*:*:*:* Versions bl20pg4 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:bl25pg2:*:*:*:*:*:*:* Versions bl25pg2 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:bl45pg2:*:*:*:*:*:*:* Versions bl45pg2 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:bl260c:*:*:*:*:*:*:* Versions bl260c Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:bl460c:*:*:*:*:*:*:* Versions bl460c Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:bl465c:*:*:*:*:*:*:* Versions bl465c Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:bl465cg5:*:*:*:*:*:*:* Versions bl465cg5 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:bl480c:*:*:*:*:*:*:* Versions bl480c Vulnerable ·Hewlett Packard Enterprise

Show 27 more CPE

CPE	Versions	Role	Vendor
cpe:2.3:h:hp:proliant:bl680cg5:::::::*	bl680cg5	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:bl685c:::::::*	bl685c	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:bl685cg5:::::::*	bl685cg5	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:dl120g5:::::::*	dl120g5	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:dl140g3:::::::*	dl140g3	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:dl145g3:::::::*	dl145g3	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:dl160g5:::::::*	dl160g5	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:dl165g5:::::::*	dl165g5	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:dl180:::::::*	dl180	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:dl180g5:::::::*	dl180g5	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:dl185g5:::::::*	dl185g5	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:dl320g5:::::::*	dl320g5	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:dl365g5:::::::*	dl365g5	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:dl380g5:::::::*	dl380g5	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:dl385g2:::::::*	dl385g2	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:dl385g5:::::::*	dl385g5	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:dl580g4:::::::*	dl580g4	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:ml110g5:::::::*	ml110g5	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:ml115:::::::*	ml115	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:ml115g5:::::::*	ml115g5	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:ml150g3:::::::*	ml150g3	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:ml150g5:::::::*	ml150g5	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:ml310g4:::::::*	ml310g4	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:ml310g5:::::::*	ml310g5	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:ml350g5:::::::*	ml350g5	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:ml370g5:::::::*	ml370g5	Vulnerable	Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:ml570g4:::::::*	ml570g4	Vulnerable	Hewlett Packard Enterprise

cpe:2.3:h:hp:proliant:bl680cg5:*:*:*:*:*:*:* Versions bl680cg5 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:bl685c:*:*:*:*:*:*:* Versions bl685c Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:bl685cg5:*:*:*:*:*:*:* Versions bl685cg5 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:dl120g5:*:*:*:*:*:*:* Versions dl120g5 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:dl140g3:*:*:*:*:*:*:* Versions dl140g3 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:dl145g3:*:*:*:*:*:*:* Versions dl145g3 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:dl160g5:*:*:*:*:*:*:* Versions dl160g5 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:dl165g5:*:*:*:*:*:*:* Versions dl165g5 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:dl180:*:*:*:*:*:*:* Versions dl180 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:dl180g5:*:*:*:*:*:*:* Versions dl180g5 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:dl185g5:*:*:*:*:*:*:* Versions dl185g5 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:dl320g5:*:*:*:*:*:*:* Versions dl320g5 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:dl365g5:*:*:*:*:*:*:* Versions dl365g5 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:dl380g5:*:*:*:*:*:*:* Versions dl380g5 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:dl385g2:*:*:*:*:*:*:* Versions dl385g2 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:dl385g5:*:*:*:*:*:*:* Versions dl385g5 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:dl580g4:*:*:*:*:*:*:* Versions dl580g4 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:ml110g5:*:*:*:*:*:*:* Versions ml110g5 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:ml115:*:*:*:*:*:*:* Versions ml115 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:ml115g5:*:*:*:*:*:*:* Versions ml115g5 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:ml150g3:*:*:*:*:*:*:* Versions ml150g3 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:ml150g5:*:*:*:*:*:*:* Versions ml150g5 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:ml310g4:*:*:*:*:*:*:* Versions ml310g4 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:ml310g5:*:*:*:*:*:*:* Versions ml310g5 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:ml350g5:*:*:*:*:*:*:* Versions ml350g5 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:ml370g5:*:*:*:*:*:*:* Versions ml370g5 Vulnerable ·Hewlett Packard Enterprise
cpe:2.3:h:hp:proliant:ml570g4:*:*:*:*:*:*:* Versions ml570g4 Vulnerable ·Hewlett Packard Enterprise

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2008-0708
2026-10-03 Alias added: GHSA-x9jf-g794-6pc5

References

Advisory 1

SSRT080032

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences