Buffer overflow in cpqlogin.htm in web-enabled agents for various Compaq management software products such as Insight Manager and Management Agents allows remote attackers to execute arbitrary commands via a long user name.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Armada_insight_manager | Compaq | 4.20 (including) | 4.20 (including) |
| Armada_insight_manager | Compaq | 4.20j (including) | 4.20j (including) |
| Enterprise_volume_manager-command_scripter | Compaq | 1.0 (including) | 1.0 (including) |
| Enterprise_volume_manager-command_scripter | Compaq | 1.1 (including) | 1.1 (including) |
| Foundation_agents | Compaq | 1.0 (including) | 1.0 (including) |
| Foundation_agents | Compaq | 2.1 (including) | 2.1 (including) |
| Foundation_agents | Compaq | 4.0 (including) | 4.0 (including) |
| Foundation_agents | Compaq | 4.90 (including) | 4.90 (including) |
| Insight_management_agent | Compaq | 4.37e (including) | 4.37e (including) |
| Insight_management_desktop_web_agent | Compaq | 3.7 (including) | 3.7 (including) |
| Insight_manager_lc | Compaq | 1.3c (including) | 1.3c (including) |
| Insight_manager_lc | Compaq | 1.50a (including) | 1.50a (including) |
| Insight_manager_xe | Compaq | 1.0 (including) | 1.0 (including) |
| Insight_manager_xe | Compaq | 1.21 (including) | 1.21 (including) |
| Intelligent_cluster_administrator | Compaq | 1.0 (including) | 1.0 (including) |
| Intelligent_cluster_administrator | Compaq | 2.1 (including) | 2.1 (including) |
| Management_agents | Compaq | 4.30j (including) | 4.30j (including) |
| Management_agents | Compaq | 4.35j (including) | 4.35j (including) |
| Management_agents | Compaq | 4.36e (including) | 4.36e (including) |
| Management_agents | Compaq | 4.36j (including) | 4.36j (including) |
| Open_san_manager | Compaq | 1.0 (including) | 1.0 (including) |
| Sanworks_resource_monitor | Compaq | 1.0 (including) | 1.0 (including) |
| Storage_allocation_reporter | Compaq | 1.0 (including) | 1.0 (including) |
| Survey_utility | Compaq | 2.17 (including) | 2.17 (including) |
| Survey_utility | Compaq | 2.18 (including) | 2.18 (including) |
| Survey_utility | Compaq | 2.33 (including) | 2.33 (including) |
| System_healthcheck | Compaq | 3.0 (including) | 3.0 (including) |
References
- http://marc.info/?l=bugtraq\u0026m=97967435023835\u0026w=2
- http://www.securityfocus.com/bid/2200
- http://www5.compaq.com/products/servers/management/agentsecurity.html
- http://marc.info/?l=bugtraq\u0026m=97967435023835\u0026w=2
- http://www.securityfocus.com/bid/2200
- http://www5.compaq.com/products/servers/management/agentsecurity.html