CVE-2001-0134

CVSS 10.0 - HIGH

Description

Buffer overflow in cpqlogin.htm in web-enabled agents for various Compaq management software products such as Insight Manager and Management Agents allows remote attackers to execute arbitrary commands via a long user name.

Affected Products

Vendor	Product	Version
compaq	armada_insight_manager	`4.20`
compaq	armada_insight_manager	`4.20j`
compaq	enterprise_volume_manager-command_scripter	`1.0`
compaq	enterprise_volume_manager-command_scripter	`1.1`
compaq	foundation_agents	`1.0`
compaq	foundation_agents	`2.1`
compaq	foundation_agents	`4.0`
compaq	foundation_agents	`4.90`
compaq	insight_management_agent	`4.37e`
compaq	insight_management_desktop_web_agent	`3.7`
compaq	insight_manager_lc	`1.3c`
compaq	insight_manager_lc	`1.50a`
compaq	insight_manager_xe	`1.0`
compaq	insight_manager_xe	`1.21`
compaq	intelligent_cluster_administrator	`1.0`
compaq	intelligent_cluster_administrator	`2.1`
compaq	management_agents	`4.30j`
compaq	management_agents	`4.35j`
compaq	management_agents	`4.36e`
compaq	management_agents	`4.36j`
compaq	open_san_manager	`1.0`
compaq	sanworks_resource_monitor	`1.0`
compaq	storage_allocation_reporter	`1.0`
compaq	survey_utility	`2.17`
compaq	survey_utility	`2.18`
compaq	survey_utility	`2.33`
compaq	system_healthcheck	`3.0`
digital	unix	`4.0f`
digital	unix	`4.0g`
digital	unix	`5.0`