Lucene search

[email protected]CVE-2001-0134

HistoryMar 12, 2001 - 5:00 a.m.

CVE-2001-0134

2001-03-1205:00:00

[email protected]

web.nvd.nist.gov

buffer overflow

compaq management software

remote access

vulnerability

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.4%

JSON

Buffer overflow in cpqlogin.htm in web-enabled agents for various Compaq management software products such as Insight Manager and Management Agents allows remote attackers to execute arbitrary commands via a long user name.

Affected configurations

NVD

Node

compaqarmada_insight_managerMatch4.20

compaqarmada_insight_managerMatch4.20j

compaqenterprise_volume_manager-command_scripterMatch1.0

compaqenterprise_volume_manager-command_scripterMatch1.1

compaqfoundation_agentsMatch1.0

compaqfoundation_agentsMatch2.1

compaqfoundation_agentsMatch4.0

compaqfoundation_agentsMatch4.90

compaqinsight_management_agentMatch4.37e

compaqinsight_management_desktop_web_agentMatch3.7

compaqinsight_manager_lcMatch1.3c

compaqinsight_manager_lcMatch1.50a

compaqinsight_manager_xeMatch1.0

compaqinsight_manager_xeMatch1.21

compaqintelligent_cluster_administratorMatch1.0

compaqintelligent_cluster_administratorMatch2.1

compaqmanagement_agentsMatch4.30j

compaqmanagement_agentsMatch4.35j

compaqmanagement_agentsMatch4.36e

compaqmanagement_agentsMatch4.36j

compaqopen_san_managerMatch1.0

compaqsanworks_resource_monitorMatch1.0

compaqstorage_allocation_reporterMatch1.0

compaqsurvey_utilityMatch2.17

compaqsurvey_utilityMatch2.18

compaqsurvey_utilityMatch2.33

compaqsystem_healthcheckMatch3.0

Node

digitalunixMatch4.0f

digitalunixMatch4.0g

digitalunixMatch5.0

CPENameOperatorVersion
compaq:armada_insight_managercompaq armada insight managereq4.20
compaq:armada_insight_managercompaq armada insight managereq4.20j
compaq:enterprise_volume_manager-command_scriptercompaq enterprise volume manager-command scriptereq1.0
compaq:enterprise_volume_manager-command_scriptercompaq enterprise volume manager-command scriptereq1.1
compaq:foundation_agentscompaq foundation agentseq1.0
compaq:foundation_agentscompaq foundation agentseq2.1
compaq:foundation_agentscompaq foundation agentseq4.0
compaq:foundation_agentscompaq foundation agentseq4.90
compaq:insight_management_agentcompaq insight management agenteq4.37e
compaq:insight_management_desktop_web_agentcompaq insight management desktop web agenteq3.7

CPE	Name	Operator	Version
compaq:armada_insight_manager	compaq armada insight manager	eq	4.20
compaq:armada_insight_manager	compaq armada insight manager	eq	4.20j
compaq:enterprise_volume_manager-command_scripter	compaq enterprise volume manager-command scripter	eq	1.0
compaq:enterprise_volume_manager-command_scripter	compaq enterprise volume manager-command scripter	eq	1.1
compaq:foundation_agents	compaq foundation agents	eq	1.0
compaq:foundation_agents	compaq foundation agents	eq	2.1
compaq:foundation_agents	compaq foundation agents	eq	4.0
compaq:foundation_agents	compaq foundation agents	eq	4.90
compaq:insight_management_agent	compaq insight management agent	eq	4.37e
compaq:insight_management_desktop_web_agent	compaq insight management desktop web agent	eq	3.7

Rows per page:

1-10 of 271

References

marc.info/?l=bugtraq&m=97967435023835&w=2

www.securityfocus.com/bid/2200

www5.compaq.com/products/servers/management/agentsecurity.html

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.4%

JSON

Related for CVE-2001-0134

nvd1 kaspersky1 cvelist1 cert1