ID CVE-2001-0134
Summary Buffer overflow in cpqlogin.htm in web-enabled agents for various Compaq management software products such as Insight Manager and Management Agents allows remote attackers to execute arbitrary commands via a long user name.
References
Vulnerable Configurations
  • cpe:2.3:a:compaq:armada_insight_manager:4.20:*:*:*:*:*:*:*
    cpe:2.3:a:compaq:armada_insight_manager:4.20:*:*:*:*:*:*:*
  • cpe:2.3:a:compaq:armada_insight_manager:4.20j:*:*:*:*:*:*:*
    cpe:2.3:a:compaq:armada_insight_manager:4.20j:*:*:*:*:*:*:*
  • cpe:2.3:a:compaq:enterprise_volume_manager-command_scripter:1.0:*:*:*:*:*:*:*
    cpe:2.3:a:compaq:enterprise_volume_manager-command_scripter:1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:compaq:enterprise_volume_manager-command_scripter:1.1:*:*:*:*:*:*:*
    cpe:2.3:a:compaq:enterprise_volume_manager-command_scripter:1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:compaq:foundation_agents:1.0:*:*:*:*:*:*:*
    cpe:2.3:a:compaq:foundation_agents:1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:compaq:foundation_agents:2.1:*:*:*:*:*:*:*
    cpe:2.3:a:compaq:foundation_agents:2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:compaq:foundation_agents:4.0:*:*:*:*:*:*:*
    cpe:2.3:a:compaq:foundation_agents:4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:compaq:foundation_agents:4.90:*:*:*:*:*:*:*
    cpe:2.3:a:compaq:foundation_agents:4.90:*:*:*:*:*:*:*
  • cpe:2.3:a:compaq:insight_management_agent:4.37e:*:*:*:*:*:*:*
    cpe:2.3:a:compaq:insight_management_agent:4.37e:*:*:*:*:*:*:*
  • cpe:2.3:a:compaq:insight_management_desktop_web_agent:3.7:*:*:*:*:*:*:*
    cpe:2.3:a:compaq:insight_management_desktop_web_agent:3.7:*:*:*:*:*:*:*
  • cpe:2.3:a:compaq:insight_manager_lc:1.3c:*:*:*:*:*:*:*
    cpe:2.3:a:compaq:insight_manager_lc:1.3c:*:*:*:*:*:*:*
  • cpe:2.3:a:compaq:insight_manager_lc:1.50a:*:*:*:*:*:*:*
    cpe:2.3:a:compaq:insight_manager_lc:1.50a:*:*:*:*:*:*:*
  • cpe:2.3:a:compaq:insight_manager_xe:1.0:*:*:*:*:*:*:*
    cpe:2.3:a:compaq:insight_manager_xe:1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:compaq:insight_manager_xe:1.21:*:*:*:*:*:*:*
    cpe:2.3:a:compaq:insight_manager_xe:1.21:*:*:*:*:*:*:*
  • cpe:2.3:a:compaq:intelligent_cluster_administrator:1.0:*:*:*:*:*:*:*
    cpe:2.3:a:compaq:intelligent_cluster_administrator:1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:compaq:intelligent_cluster_administrator:2.1:*:*:*:*:*:*:*
    cpe:2.3:a:compaq:intelligent_cluster_administrator:2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:compaq:management_agents:4.30j:*:*:*:*:*:*:*
    cpe:2.3:a:compaq:management_agents:4.30j:*:*:*:*:*:*:*
  • cpe:2.3:a:compaq:management_agents:4.35j:*:*:*:*:*:*:*
    cpe:2.3:a:compaq:management_agents:4.35j:*:*:*:*:*:*:*
  • cpe:2.3:a:compaq:management_agents:4.36e:*:*:*:*:*:*:*
    cpe:2.3:a:compaq:management_agents:4.36e:*:*:*:*:*:*:*
  • cpe:2.3:a:compaq:management_agents:4.36j:*:*:*:*:*:*:*
    cpe:2.3:a:compaq:management_agents:4.36j:*:*:*:*:*:*:*
  • cpe:2.3:a:compaq:open_san_manager:1.0:*:*:*:*:*:*:*
    cpe:2.3:a:compaq:open_san_manager:1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:compaq:sanworks_resource_monitor:1.0:*:*:*:*:*:*:*
    cpe:2.3:a:compaq:sanworks_resource_monitor:1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:compaq:storage_allocation_reporter:1.0:*:*:*:*:*:*:*
    cpe:2.3:a:compaq:storage_allocation_reporter:1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:compaq:survey_utility:2.17:*:*:*:*:*:*:*
    cpe:2.3:a:compaq:survey_utility:2.17:*:*:*:*:*:*:*
  • cpe:2.3:a:compaq:survey_utility:2.18:*:*:*:*:*:*:*
    cpe:2.3:a:compaq:survey_utility:2.18:*:*:*:*:*:*:*
  • cpe:2.3:a:compaq:survey_utility:2.33:*:*:*:*:*:*:*
    cpe:2.3:a:compaq:survey_utility:2.33:*:*:*:*:*:*:*
  • cpe:2.3:a:compaq:system_healthcheck:3.0:*:*:*:*:*:*:*
    cpe:2.3:a:compaq:system_healthcheck:3.0:*:*:*:*:*:*:*
  • cpe:2.3:o:digital:unix:4.0f:*:*:*:*:*:*:*
    cpe:2.3:o:digital:unix:4.0f:*:*:*:*:*:*:*
  • cpe:2.3:o:digital:unix:4.0g:*:*:*:*:*:*:*
    cpe:2.3:o:digital:unix:4.0g:*:*:*:*:*:*:*
  • cpe:2.3:o:digital:unix:5.0:*:*:*:*:*:*:*
    cpe:2.3:o:digital:unix:5.0:*:*:*:*:*:*:*
CVSS
Base: 10.0 (as of 18-10-2016 - 02:09)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:C/I:C/A:C
refmap via4
bid 2200
bugtraq 20010116 iXsecurity.20001120.compaq-authbo.a
compaq SSRT0705
Last major update 18-10-2016 - 02:09
Published 12-03-2001 - 05:00
Last modified 18-10-2016 - 02:09
Back to Top