PT-2004-2710 · Hewlett Packard · Hp Web-Enabled Management

Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-1811

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions HP Web-enabled Management Software versions 5.0 through 5.92

Description The issue allows remote attackers to compromise trusted certificates by uploading their own certificates when anonymous access is enabled in the SSL HTTP Server.

Recommendations For HP Web-enabled Management Software versions 5.0 through 5.92, disable anonymous access to prevent the upload of unauthorized certificates.

Fix

Related Identifiers

CVE-2004-1811

Affected Products

Hp Web-Enabled Management

References · 10

• http://securityfocus.com/bid/9859 · Patch
• http://immunitysec.com/downloads/hp_http.sxw.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-1811 · Security Note
• http://securityfocus.com/advisories/6448 · Vendor Advisory
• http://ciac.org/ciac/bulletins/o-100.shtml · Patch
• http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0057.html · Note
• http://secunia.com/advisories/11126 · Note
• http://tru64.org/stories.php?story=04/03/12/0204078 · Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15466 · Note
• http://marc.info/?l=bugtraq&m=107936784030214&w=2 · Note