CVE-2001-0374: High severity compaq web-enabled management vulnerability

Published May 24, 2001

Updated

The HTTP server in Compaq web-enabled management software for (1) Foundation Agents, (2) Survey, (3) Power Manager, (4) Availability Agents, (5) Intelligent Cluster Administrator, and (6) Insight Manager can be used as a generic proxy server, which allows remote attackers to bypass access restrictions via the management port, 2301.

Affected Software

1 affected component

Compaq web-enabled management

Remediation

Patch Available

http://www.compaq.com/products/servers/management/mgtsw-advisory.html

Event History

May 24, 2001

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-0374?

CVE-2001-0374 is considered a medium severity vulnerability due to the risk of remote access and potential unauthorized actions.

How do I fix CVE-2001-0374?

To fix CVE-2001-0374, it is recommended to upgrade to a patched version of the Compaq web-enabled management software.

What systems are affected by CVE-2001-0374?

CVE-2001-0374 affects various Compaq web-enabled management software, including Foundation Agents and Insight Manager.

What risks are associated with CVE-2001-0374?

The risks associated with CVE-2001-0374 include unauthorized access, potential data exposure, and the ability to bypass security controls.

Can CVE-2001-0374 be exploited remotely?

Yes, CVE-2001-0374 can be exploited remotely, allowing attackers to use the vulnerable HTTP server as a proxy.