KLA10124 ACE vulnerability in Compaq

A buffer overflow was found in Compaq products. By exploiting this vulnerability malicious users can execute arbitrary programs. This vulnerability can be exploited from the network at a point related to web login via a specially designed user name.

Original advisories

Compaq bulletin

Related products

HP-Compaq-Insight-Management-Agents

Compaq-HP-Survey-Utility

CVE list

CVE-2001-0134 critical

Solution

Update to latest version

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• Compaq System Healthcheck version 3.0Compaq Survey Utility versions 2.33, 2.18, 2.17Compaq Storage Allocation Reporter version 1.0Compaq SANWorks Resource Monitor version 1.0 Compaq Open SAN Manager version 1.0 Compaq Management Agents versions 4.37 E, 4.36 j, 4.36 E, 4.35 j, 4.30 jCompaq Intelligent Cluster Administrator versions 2.1, 1.0Compaq Insight Manager XE versions 1.21, 1.0Compaq Insight Manager LC versions 1.50 A, 1.3 cCompaq Insight Management Desktop Web Agents version 3.7 Compaq Enterprise Volume Manager/Command Scripter versions 1.1, 1.0 Compaq Compaq Foundation Agents versions 4.90, 4.0, 2.1, 1.0Compaq Armada Insight Manager versions 4.20 j, 4.20