Compaq Management Agents Buffer Overflow Vulnerability
BID:3376
Info
Compaq Management Agents Buffer Overflow Vulnerability
| Bugtraq ID: | 3376 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 30 2001 12:00AM |
| Updated: | Sep 30 2001 12:00AM |
| Credit: | Posted in a Compaq Security Advisory - SSRT0758. |
| Vulnerable: |
Compaq Tape Storage Management Console 2.1 Compaq Tape Storage Management Console 1.0 Compaq System Healthcheck 4.0 Compaq System Healthcheck 3.1 Compaq Survey Utility 2.37 Compaq Survey Utility 2.17 Compaq Survey Utility 1.0.10 Compaq Survey Utility 1.0.4 Compaq Survey Utility 1.0.1 Compaq Survey Utility 1.0 Compaq Storage Allocation Reporter 1.0 Compaq SANWorks Resource Monitor 1.0 Compaq Power Management 1.8 Compaq Power Management 1.4 Compaq Open SAN Manager 1.0 Compaq Management Agents for Tru64 UNIX 2.2 Compaq Management Agents for Tru64 UNIX 1.0 Compaq Management Agents for OpenVMS 2.2 Compaq Management Agents for OpenVMS 2.1 Compaq Management Agents for OpenVMS 2.0 Compaq Management Agents for OpenVMS 1.0 Compaq Management Agents for Desktops & Workstations 4.36 Compaq Management Agents for Desktops & Workstations 3.60 Compaq Management Agents 4.36 E Compaq Intelligent Cluster Administrator 2.1 b Compaq Intelligent Cluster Administrator 1.0 Compaq Insight Manager XE 2.2 Compaq Insight Manager XE 1.0 Compaq Insight Manager LC Combined Client & Combined Cons 1.50 A Compaq Insight Manager LC Combined Client & Combined Cons 1.0 3c Compaq Insight Management Desktop Web Agents 3.7 Compaq Enterprise Volume Manager/Command Scripter 1.0 Compaq Compaq Foundation Agents 5.1 Compaq Compaq Foundation Agents 4.0 Compaq Availability Agents 1.0 b Compaq Availability Agents 1.0 Compaq Armada Insight Manager 4.30 |
| Not Vulnerable: | |
Discussion
Compaq Management Agents Buffer Overflow Vulnerability
A vulnerability has been reported in a component of the web-enabled Compaq management software which could allow a remote attacker to execute arbitrary code on the affected system, with the privilege level of the system administrator. This is achievable via buffer overflow attack techniques employing maliciously-formed user-supplied input.
No further technical details have been provided.
A vulnerability has been reported in a component of the web-enabled Compaq management software which could allow a remote attacker to execute arbitrary code on the affected system, with the privilege level of the system administrator. This is achievable via buffer overflow attack techniques employing maliciously-formed user-supplied input.
No further technical details have been provided.
Exploit / POC
Compaq Management Agents Buffer Overflow Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Compaq Management Agents Buffer Overflow Vulnerability
Solution:
The following fix information was excerpted from Compaq's Security Advisory:
ftp://ftp.compaq.com/pub/softpaq/sp17501-18000/
SoftPaq SP 17926 - fixes the problem for affected versions of Compaq Foundation Agents for Windows Servers, Compaq Survey for Windows, Compaq Power Manager, Compaq Intelligent Cluster Administrator, and Compaq Availability Agents. This patch also fixes the problem for the SNMP and DMI agents installed with Compaq Insight Manager XE Version 2.0 and 2.1. Compaq recommends applying the patch if any of the Compaq Management Software mentioned above is installed.
SoftPaq SP 17927 - fixes the problem for affected versions of the Compaq Foundation Agents for Novell NetWare servers.
SoftPaq SP 17928 - fixes the problem for affected versions of the Compaq Foundation Agents for Linux servers
Solution:
The following fix information was excerpted from Compaq's Security Advisory:
ftp://ftp.compaq.com/pub/softpaq/sp17501-18000/
SoftPaq SP 17926 - fixes the problem for affected versions of Compaq Foundation Agents for Windows Servers, Compaq Survey for Windows, Compaq Power Manager, Compaq Intelligent Cluster Administrator, and Compaq Availability Agents. This patch also fixes the problem for the SNMP and DMI agents installed with Compaq Insight Manager XE Version 2.0 and 2.1. Compaq recommends applying the patch if any of the Compaq Management Software mentioned above is installed.
SoftPaq SP 17927 - fixes the problem for affected versions of the Compaq Foundation Agents for Novell NetWare servers.
SoftPaq SP 17928 - fixes the problem for affected versions of the Compaq Foundation Agents for Linux servers
References
Compaq Management Agents Buffer Overflow Vulnerability
References:
References:
- SECURITY ADVISORY - SSRT0758 (Compaq)