CIMcheck2.pl

! c:\perl\bin\perl.exe CIMcheck 1.2 - Compaq Insight Manager Exploit Checker By Neon-Lenz ------------------------------------------------------------------ Yea i know this little script is very easy to code and lame, but what the hell. This should do the job. Assuming i'm still learning Perl...

CVE-1999-0771

CVE-1999-0771 affects the web components of Compaq Management Agents and the Compaq Survey Utility , enabling a remote attacker to read arbitrary files via a .. (dot dot) path traversal in the web interface. The root cause is insufficient validation of file paths in the affected web components, r...

CVE-1999-0713

CVE-1999-0713 affects the dtlogin program in Compaq Tru64 UNIX, enabling local users to gain root privileges. The provided connected documents confirm the affected software/component and the local-privilege impact, but do not specify the underlying root cause, exploit details, or a remediation. N...

CVE-1999-0772

Denial of service in Compaq Management Agents and the Compaq Survey Utility via a long string sent to port 2301...

CVE-1999-0772

The CVE-1999-0772 issue affects Compaq Management Agents and the Compaq Survey Utility. A long string sent to port 2301 can cause a denial of service. The Red Hat entry corroborates the DoS behavior, and PT-1999-1343 outlines practical mitigations: (1) restrict access to port 2301 for Compaq Mana...

CVE-1999-0713

The dtlogin program in Compaq Tru64 UNIX allows local users to gain root privileges...

CVE-1999-0714

Vulnerability in Compaq Tru64 UNIX edauth command...

CVE-1999-0771

The web components of Compaq Management Agents and the Compaq Survey Utility allow a remote attacker to read arbitrary files via a .. dot dot attack...

CVE-1999-0714

The CVE-1999-0714 issue maps to Compaq Tru64 UNIX: the vulnerability is in the edauth command. Affects Tru64 UNIX edauth; the exact vulnerable component is the edauth executable. The documented impact indicates a LOCAL attack vector with low severity and partial confidentiality impact; exploitati...

CVE-1999-0713: Undefined Security Weakness

The dtlogin program in Compaq Tru64 UNIX allows local users to gain root privileges...

CVE-1999-0714: Undefined Security Weakness

Vulnerability in Compaq Tru64 UNIX edauth command...

CVE-1999-0771: Undefined Security Weakness

The web components of Compaq Management Agents and the Compaq Survey Utility allow a remote attacker to read arbitrary files via a .. dot dot attack...

CVE-1999-0772: Undefined Security Weakness

Denial of service in Compaq Management Agents and the Compaq Survey Utility via a long string sent to port 2301...

CVE-1999-1355

BMC Patrol component, when installed with Compaq Insight Management Agent 4.23 and earlier, or Management Agents for Servers 4.40 and earlier, creates a PFCUser account with a default password and potentially dangerous privileges...

CVE-1999-1356

Compaq Integration Maintenance Utility as used in Compaq Insight Manager agent before SmartStart 4.50 modifies the legal notice caption LegalNoticeCaption and text LegalNoticeText in Windows NT, which could produce a legal notice that is in violation of the security policy...

compaq.insight.manager.server.txt

Date: Wed, 26 May 1999 16:41:36 +0100 From: [email protected] To: [email protected] Subject: Infosec.19990526.compaq-im.a Infosec Security Vulnerability Report No: Infosec.19990526.compaq-im.a ===================================== Vulnerability Summary --------------------- Problem:...

CVE-1999-0713

The dtlogin program in Compaq Tru64 UNIX allows local users to gain root privileges...

CVE-1999-0772

Denial of service in Compaq Management Agents and the Compaq Survey Utility via a long string sent to port 2301...

CVE-1999-0771

The web components of Compaq Management Agents and the Compaq Survey Utility allow a remote attacker to read arbitrary files via a .. dot dot attack...

Compaq Client Management Agents 3.70/4.0 / Insight Management Agents 4.21 A/4.22 A/4.30 A / Intelligent Cluster Administrator 1.0 / Management Agents for Workstations 4.20 A / Server Management Agents 4.23 / Survey Utility 2.0 - Web File Access

source: https://www.securityfocus.com/bid/282/info A vulnerability in the Compaq Management Agents and the Compaq Survey Utility when running as an agent allows remote malicious users to steal local files. All Compaq Server and Client Management Agents version 4.0 or later are vulnerable. All...