CVE-2001-0134

Critical

Description

Buffer overflow in cpqlogin.htm in web-enabled agents for various Compaq management software products such as Insight Manager and Management Agents allows remote attackers to execute arbitrary commands via a long user name.

SeverityCritical
CVSS10.0
Exploit probability—
ProductCompaq Insight Management Agent
PublishedMar 12, 2001
First seenMar 12, 2001

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
compaq insight_management_agent4.37e—
compaq armada_insight_manager4.20, 4.20j—
compaq enterprise_volume_manager-command_scripter1.0, 1.1—
compaq foundation_agents1.0, 2.1, 4.0, 4.90—
compaq insight_management_desktop_web_agent3.7—
compaq insight_manager_lc1.3c, 1.50a—
compaq insight_manager_xe1.0, 1.21—
compaq intelligent_cluster_administrator1.0, 2.1—
compaq management_agents4.30j, 4.35j, 4.36e, 4.36j—
compaq open_san_manager1.0—
compaq sanworks_resource_monitor1.0—
compaq storage_allocation_reporter1.0—
compaq survey_utility2.17, 2.18, 2.33—
compaq system_healthcheck3.0—
digital unix4.0f, 4.0g, 5.0—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.