发布时间 :1999-05-26 00:00:00
修订时间 :2008-09-09 08:35:37

[原文]The web components of Compaq Management Agents and the Compaq Survey Utility allow a remote attacker to read arbitrary files via a .. (dot dot) attack.

[CNNVD]Compaq Management Agents 和 Compaq Survey Utility读取任意文件漏洞(CNNVD-199905-046)

        Compaq Management Agents 和 Compaq Survey Utility中的网络组件存在漏洞。远程攻击者通过一个..(点 点)攻击读取任意文件。

- CVSS (基础分值)

CVSS分值: 5 [中等(MEDIUM)]
机密性影响: PARTIAL [很可能造成信息泄露]
完整性影响: NONE [不会对系统完整性产生影响]
可用性影响: NONE [对系统可用性无影响]
攻击复杂度: LOW [漏洞利用没有访问限制 ]
攻击向量: [--]
身份认证: NONE [漏洞利用无需身份认证]

- CPE (受影响的平台与产品)

cpe:/a:compaq:insight_management_agentCompaq Insight Management Agent

- OVAL (用于检测的技术细节)


- 官方数据库链接
(官方数据源) MITRE
(官方数据源) NVD
(官方数据源) CNNVD

- 其它链接及资源

- 漏洞信息

Compaq Management Agents 和 Compaq Survey Utility读取任意文件漏洞
中危 未知
1999-05-26 00:00:00 2005-05-02 00:00:00
        Compaq Management Agents 和 Compaq Survey Utility中的网络组件存在漏洞。远程攻击者通过一个..(点 点)攻击读取任意文件。

- 公告与补丁


- 漏洞信息 (19225)

Compaq Client Management Agents 3.70/4.0,Insight Management Agents 4.21 A/4.22 A/4.30 A,Intelligent Cluster Administrator 1.0,Management Agents for Workstations 4.20 A,Server Management Agents <= 4.23,Survey Utility 2.0 Web File Access Vulnerability (EDBID:19225)
multiple dos
1999-05-25 Verified
0 Master Dogen
N/A [点击下载]

A vulnerability in the Compaq Management Agents and the Compaq Survey Utility when running as an agent allows remote malicious users to steal local files. All Compaq Server and Client Management Agents version 4.0 or later are vulnerable. All Compaq Survey Utility versions 2.0 or later are vulnerable.

Compaq's Insight Manger a comprehensive management tool to monitor and control the operation of Compaq servers and clients and DIGITAL X86 and Alpha-based servers. One of its features is web acess to its device and configuration information via a built-in web server in the agents. Insight Manager is available for several platforms including Windows NT and Netware.

The web server in the agents fails to check whether requested files fall outside its document tree (by using ".." in the URL). Thus attackers can retrieve files in the same drives as that on which the software resides if they know or can get it's filename.

The web server listens on port 2301. By default the only user accounts available in the agents are account "anonymous", username "anonymous", no password, account "user", username "user", password "public", and account "administrator", username "administrator", and password "administrator". You login via the URL

One an attacker has access to on such machine, using Compaq's HTTP Auto-Discovery Device List at the URL they can locate other machines.

The web agent service also appears to be vulnerable a a denial of service. By sending it a request for over 223 bytes long ("AAAA...") the service will fail with an access violation. 		

- 漏洞信息

Compaq Management Agent/Survey Utility Traversal Arbitrary File Access
Remote / Network Access Information Disclosure
Loss of Confidentiality Upgrade
Exploit Public Vendor Verified

- 漏洞描述

- 时间线

1999-06-07 Unknow
Unknow Unknow

- 解决方案

Upgrade Management Agents to version 4.23b or higher and Survey Utility to version 2.18 or higher, as they have been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

- 相关参考

- 漏洞作者

Unknown or Incomplete