PT-2004-2710 · Hewlett Packard · Hp Web-Enabled Management

Publicado 2004-12-31 · Atualizado 2017-07-11 · CVE-2004-1811

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions HP Web-enabled Management Software versions 5.0 through 5.92

Description The issue allows remote attackers to compromise trusted certificates by uploading their own certificates when anonymous access is enabled in the SSL HTTP Server.

Recommendations For HP Web-enabled Management Software versions 5.0 through 5.92, disable anonymous access to prevent the upload of unauthorized certificates.

Correção

Identificadores relacionados

CVE-2004-1811

Produtos afetados

Hp Web-Enabled Management

Referências · 10

• http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0057.html · Nota
• http://secunia.com/advisories/11126 · Nota
• http://securityfocus.com/bid/9859 · Correção
• http://immunitysec.com/downloads/hp_http.sxw.pdf · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2004-1811 · Nota de Segurança
• http://tru64.org/stories.php?story=04/03/12/0204078 · Correção, Aviso do Fabricante
• http://securityfocus.com/advisories/6448 · Aviso do Fabricante
• http://ciac.org/ciac/bulletins/o-100.shtml · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15466 · Nota
• http://marc.info/?l=bugtraq&m=107936784030214&w=2 · Nota