{"vuid":"VU#275979","idnumber":"275979","name":"Compaq web-enabled management software buffer overflow vulnerability","keywords":["Compaq web-enabled management software","Insight Manager","HTTP","buffer overflow","arbitrary code execution","SSRT0758"],"overview":"The Compaq web-enabled management software contains a buffer overflow. Remote intruders may be able to execute arbitrary code with privileges on affected systems. Many Compaq products are affected, from personal computers to commercial UNIX operating systems.","clean_desc":"The Compaq web-enabled management software allows system management information to be accessed through a web interface. This web interface contains a buffer overflow. Affected Compaq products include those running Microsoft Windows 9x, Windows NT, Windows 2000, NetWare, SCO Open Server, SCO UnixWare 7, RedHat 6.2, RedHat 7.0, Tru64Unix, and OpenVMS. Web-enabled management software is also supported for Compaq storage products. Compaq has produced a security advisory describing this problem at http://www.compaq.com/products/servers/management/SSRT0758.html","impact":"A remote attacker may be able to execute arbitrary code with privileges on systems running the vulnerable software.","resolution":"Apply a Patch Apply a patch from your vendor. Information about patches to correct this problem is available in the Compaq security advisory. The patches described in Compaq security advisory SSRT0758 correct this vulnerability and those decribed in VU#137024 and VU#991240.","workarounds":"Disable the Web-Enabled Management Software You can prevent this vulnerability from being exploited by disabling the web-enabled management software. Block Ports 2301 and 280 at Your Perimeter Port 2301 (the device management port) is the port used to access the vulnerable code. Blocking access to this port from untrusted sources may reduce the risk of exploitation. You may also wish to block port 280 (the Compaq Insight Manager XE port).","sysaffected":"","thanks":"The CERT/CC thanks Compaq for their advisory on this topic.","author":"This document was written by Cory F. Cohen.","public":["http://www.compaq.com/products/servers/management/SSRT0758.html","http://www.compaq.com/products/servers/management/mgtsw-advisory.html","http://www.compaq.com/products/servers/management/mgtsw-advisory2.html","http://www.securityfocus.com/bid/3376"],"cveids":["CVE-2001-0728"],"certadvisory":"","uscerttechnicalalert":null,"datecreated":"2001-10-01T15:04:22Z","publicdate":"2001-10-01T00:00:00Z","datefirstpublished":"2001-11-19T20:40:15Z","dateupdated":"2001-11-19T20:40:18Z","revision":8,"vrda_d1_directreport":"","vrda_d1_population":"","vrda_d1_impact":"","cam_widelyknown":"15","cam_exploitation":"0","cam_internetinfrastructure":"5","cam_population":"15","cam_impact":"19","cam_easeofexploitation":"7","cam_attackeraccessrequired":"15","cam_scorecurrent":"11.221875","cam_scorecurrentwidelyknown":"14.02734375","cam_scorecurrentwidelyknownexploited":"25.24921875","ipprotocol":"","cvss_accessvector":"","cvss_accesscomplexity":"","cvss_authentication":null,"cvss_confidentialityimpact":"","cvss_integrityimpact":"","cvss_availabilityimpact":"","cvss_exploitablity":null,"cvss_remediationlevel":"","cvss_reportconfidence":"","cvss_collateraldamagepotential":"","cvss_targetdistribution":"","cvss_securityrequirementscr":"","cvss_securityrequirementsir":"","cvss_securityrequirementsar":"","cvss_basescore":"","cvss_basevector":"","cvss_temporalscore":"","cvss_environmentalscore":"","cvss_environmentalvector":"","metric":11.221875,"vulnote":null}