Vulnerabilities > CVE-2001-0134 - Buffer Overflow vulnerability in Compaq Web Admin

CVSS 10.0 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

COMPLETE

Integrity impact

COMPLETE

Availability impact

COMPLETE

network

low complexity

compaq

digital

critical

NVD

Published: 2001-03-12

Updated: 2016-10-18

Summary

Buffer overflow in cpqlogin.htm in web-enabled agents for various Compaq management software products such as Insight Manager and Management Agents allows remote attackers to execute arbitrary commands via a long user name.

Vulnerable Configurations

Part	Description	Count
Application	Compaq Compaq Armada Insight Manager 4.20 Compaq Armada Insight Manager 4.20J Compaq Enterprise Volume Manager Command Scripter 1.0 Compaq Enterprise Volume Manager Command Scripter 1.1 Compaq Foundation Agents 1.0 Compaq Foundation Agents 2.1 Compaq Foundation Agents 4.0 Compaq Foundation Agents 4.90 Compaq Insight Management Agent 4.37E Compaq Insight Management Desktop WEB Agent 3.7 Compaq Insight Manager LC 1.3C Compaq Insight Manager LC 1.50A Compaq Insight Manager XE 1.0 Compaq Insight Manager XE 1.21 Compaq Intelligent Cluster Administrator 1.0 Compaq Intelligent Cluster Administrator 2.1 Compaq Management Agents 4.30J Compaq Management Agents 4.35J Compaq Management Agents 4.36E Compaq Management Agents 4.36J Compaq Open SAN Manager 1.0 Compaq Sanworks Resource Monitor 1.0 Compaq Storage Allocation Reporter 1.0 Compaq Survey Utility 2.17 Compaq Survey Utility 2.18 Compaq Survey Utility 2.33 Compaq System Healthcheck 3.0	27
OS	Digital Digital Unix 4.0F Digital Unix 4.0G Digital Unix 5.0	3

Summary

Vulnerable Configurations

References