CVE:CVE-2001-0134
CNNVD:CNNVD-200103-064
各种例如Insight Manager和Management Agents的Compaq管理软件产品中web-enabled代理cpqlogin.htm存在缓冲区溢出漏洞。远程攻击者借助超长用户名执行任意命令。
solution:Upgrade compaq armada_insight_manager to a higher version than 4.20,4.20j,and avoid the version 4.20,4.20j; Upgrade compaq enterprise_volume_manager-command_scripter to a higher version than 1.0,1.1,and avoid the version 1.0,1.1; Upgrade compaq foundation_agents to a higher version than 1.0,2.1,4.0,4.90,and avoid the version 1.0,2.1,4.0,4.90; Upgrade compaq insight_management_agent to a higher version than 4.37e,and avoid the version 4.37e; Upgrade compaq insight_management_desktop_web_agent to a higher version than 3.7,and avoid the version 3.7; Upgrade compaq insight_manager_lc to a higher version than 1.3c,1.50a,and avoid the version 1.3c,1.50a; Upgrade compaq insight_manager_xe to a higher version than 1.0,1.21,and avoid the version 1.0,1.21; Upgrade compaq intelligent_cluster_administrator to a higher version than 1.0,2.1,and avoid the version 1.0,2.1; Upgrade compaq management_agents to a higher version than 4.30j,4.35j,4.36e,4.36j,and avoid the version 4.30j,4.35j,4.36e,4.36j; Upgrade compaq open_san_manager to a higher version than 1.0,and avoid the version 1.0; Upgrade compaq sanworks_resource_monitor to a higher version than 1.0,and avoid the version 1.0; Upgrade compaq storage_allocation_reporter to a higher version than 1.0,and avoid the version 1.0; Upgrade compaq survey_utility to a higher version than 2.17,2.18,2.33,and avoid the version 2.17,2.18,2.33; Upgrade compaq system_healthcheck to a higher version than 3.0,and avoid the version 3.0; Upgrade digital unix to a higher version than 4.0f,4.0g,5.0,and avoid the version 4.0f,4.0g,5.0