CVE-2001-0134

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2001-0134
Buffer overflow in cpqlogin.htm in web-enabled agents for various Compaq management software products such as Insight Manager and Management Agents allows remote attackers to execute arbitrary commands via a long user name.

10.0 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
http://marc.info/?l=bugtraq&m=97967435023835&w=2
http://www.securityfocus.com/bid/2200 Patch Vendor Advisory
http://www5.compaq.com/products/servers/management/agentsecurity.html Patch
http://marc.info/?l=bugtraq&m=97967435023835&w=2
http://www.securityfocus.com/bid/2200 Patch Vendor Advisory
http://www5.compaq.com/products/servers/management/agentsecurity.html Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:compaq:armada_insight_manager:4.20:*:*:*:*:*:*:*
cpe:2.3:a:compaq:armada_insight_manager:4.20j:*:*:*:*:*:*:*
cpe:2.3:a:compaq:enterprise_volume_manager-command_scripter:1.0:*:*:*:*:*:*:*
cpe:2.3:a:compaq:enterprise_volume_manager-command_scripter:1.1:*:*:*:*:*:*:*
cpe:2.3:a:compaq:foundation_agents:1.0:*:*:*:*:*:*:*
cpe:2.3:a:compaq:foundation_agents:2.1:*:*:*:*:*:*:*
cpe:2.3:a:compaq:foundation_agents:4.0:*:*:*:*:*:*:*
cpe:2.3:a:compaq:foundation_agents:4.90:*:*:*:*:*:*:*
cpe:2.3:a:compaq:insight_management_agent:4.37e:*:*:*:*:*:*:*
cpe:2.3:a:compaq:insight_management_desktop_web_agent:3.7:*:*:*:*:*:*:*
cpe:2.3:a:compaq:insight_manager_lc:1.3c:*:*:*:*:*:*:*
cpe:2.3:a:compaq:insight_manager_lc:1.50a:*:*:*:*:*:*:*
cpe:2.3:a:compaq:insight_manager_xe:1.0:*:*:*:*:*:*:*
cpe:2.3:a:compaq:insight_manager_xe:1.21:*:*:*:*:*:*:*
cpe:2.3:a:compaq:intelligent_cluster_administrator:1.0:*:*:*:*:*:*:*
cpe:2.3:a:compaq:intelligent_cluster_administrator:2.1:*:*:*:*:*:*:*
cpe:2.3:a:compaq:management_agents:4.30j:*:*:*:*:*:*:*
cpe:2.3:a:compaq:management_agents:4.35j:*:*:*:*:*:*:*
cpe:2.3:a:compaq:management_agents:4.36e:*:*:*:*:*:*:*
cpe:2.3:a:compaq:management_agents:4.36j:*:*:*:*:*:*:*
cpe:2.3:a:compaq:open_san_manager:1.0:*:*:*:*:*:*:*
cpe:2.3:a:compaq:sanworks_resource_monitor:1.0:*:*:*:*:*:*:*
cpe:2.3:a:compaq:storage_allocation_reporter:1.0:*:*:*:*:*:*:*
cpe:2.3:a:compaq:survey_utility:2.17:*:*:*:*:*:*:*
cpe:2.3:a:compaq:survey_utility:2.18:*:*:*:*:*:*:*
cpe:2.3:a:compaq:survey_utility:2.33:*:*:*:*:*:*:*
cpe:2.3:a:compaq:system_healthcheck:3.0:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:digital:unix:4.0f:*:*:*:*:*:*:*
cpe:2.3:o:digital:unix:4.0g:*:*:*:*:*:*:*
cpe:2.3:o:digital:unix:5.0:*:*:*:*:*:*:*
History

20 Nov 2024, 23:34

Type Values Removed Values Added
References () http://marc.info/?l=bugtraq&m=97967435023835&w=2 - () http://marc.info/?l=bugtraq&m=97967435023835&w=2 -
References () http://www.securityfocus.com/bid/2200 - Patch, Vendor Advisory () http://www.securityfocus.com/bid/2200 - Patch, Vendor Advisory
References () http://www5.compaq.com/products/servers/management/agentsecurity.html - Patch () http://www5.compaq.com/products/servers/management/agentsecurity.html - Patch
Information

Published : 2001-03-12 05:00

Updated : 2024-11-20 23:34

NVD link : CVE-2001-0134

Mitre link : CVE-2001-0134

CVE.ORG link : CVE-2001-0134

JSON object : View

Products Affected

compaq

  • survey_utility
  • insight_manager_lc
  • insight_manager_xe
  • open_san_manager
  • sanworks_resource_monitor
  • foundation_agents
  • system_healthcheck
  • insight_management_agent
  • storage_allocation_reporter
  • armada_insight_manager
  • enterprise_volume_manager-command_scripter
  • insight_management_desktop_web_agent
  • intelligent_cluster_administrator
  • management_agents

digital

  • unix
CWE
NVD-CWE-Other