CVE-2001-0134 (CNNVD-200103-064)

CRITICAL
中文标题:
Compaq Web Admin缓冲区溢出漏洞
英文标题:
Buffer overflow in cpqlogin.htm in web-enabled agents for various Compaq management software product...
CVSS分数: 10.0
发布时间: 2001-02-14 05:00:00
漏洞类型: 授权问题
状态: PUBLISHED
数据质量分数: 0.30
数据版本: v3
漏洞描述
中文描述:

各种例如Insight Manager和Management Agents的Compaq管理软件产品中web-enabled代理cpqlogin.htm存在缓冲区溢出漏洞。远程攻击者借助超长用户名执行任意命令。

英文描述:

Buffer overflow in cpqlogin.htm in web-enabled agents for various Compaq management software products such as Insight Manager and Management Agents allows remote attackers to execute arbitrary commands via a long user name.

CWE类型:
(暂无数据)
标签:
(暂无数据)
受影响产品
厂商 产品 版本 版本范围 平台 CPE
compaq armada_insight_manager 4.20 - - cpe:2.3:a:compaq:armada_insight_manager:4.20:*:*:*:*:*:*:*
compaq armada_insight_manager 4.20j - - cpe:2.3:a:compaq:armada_insight_manager:4.20j:*:*:*:*:*:*:*
compaq enterprise_volume_manager-command_scripter 1.0 - - cpe:2.3:a:compaq:enterprise_volume_manager-command_scripter:1.0:*:*:*:*:*:*:*
compaq enterprise_volume_manager-command_scripter 1.1 - - cpe:2.3:a:compaq:enterprise_volume_manager-command_scripter:1.1:*:*:*:*:*:*:*
compaq foundation_agents 1.0 - - cpe:2.3:a:compaq:foundation_agents:1.0:*:*:*:*:*:*:*
compaq foundation_agents 2.1 - - cpe:2.3:a:compaq:foundation_agents:2.1:*:*:*:*:*:*:*
compaq foundation_agents 4.0 - - cpe:2.3:a:compaq:foundation_agents:4.0:*:*:*:*:*:*:*
compaq foundation_agents 4.90 - - cpe:2.3:a:compaq:foundation_agents:4.90:*:*:*:*:*:*:*
compaq insight_management_agent 4.37e - - cpe:2.3:a:compaq:insight_management_agent:4.37e:*:*:*:*:*:*:*
compaq insight_management_desktop_web_agent 3.7 - - cpe:2.3:a:compaq:insight_management_desktop_web_agent:3.7:*:*:*:*:*:*:*
compaq insight_manager_lc 1.3c - - cpe:2.3:a:compaq:insight_manager_lc:1.3c:*:*:*:*:*:*:*
compaq insight_manager_lc 1.50a - - cpe:2.3:a:compaq:insight_manager_lc:1.50a:*:*:*:*:*:*:*
compaq insight_manager_xe 1.0 - - cpe:2.3:a:compaq:insight_manager_xe:1.0:*:*:*:*:*:*:*
compaq insight_manager_xe 1.21 - - cpe:2.3:a:compaq:insight_manager_xe:1.21:*:*:*:*:*:*:*
compaq intelligent_cluster_administrator 1.0 - - cpe:2.3:a:compaq:intelligent_cluster_administrator:1.0:*:*:*:*:*:*:*
compaq intelligent_cluster_administrator 2.1 - - cpe:2.3:a:compaq:intelligent_cluster_administrator:2.1:*:*:*:*:*:*:*
compaq management_agents 4.30j - - cpe:2.3:a:compaq:management_agents:4.30j:*:*:*:*:*:*:*
compaq management_agents 4.35j - - cpe:2.3:a:compaq:management_agents:4.35j:*:*:*:*:*:*:*
compaq management_agents 4.36e - - cpe:2.3:a:compaq:management_agents:4.36e:*:*:*:*:*:*:*
compaq management_agents 4.36j - - cpe:2.3:a:compaq:management_agents:4.36j:*:*:*:*:*:*:*
compaq open_san_manager 1.0 - - cpe:2.3:a:compaq:open_san_manager:1.0:*:*:*:*:*:*:*
compaq sanworks_resource_monitor 1.0 - - cpe:2.3:a:compaq:sanworks_resource_monitor:1.0:*:*:*:*:*:*:*
compaq storage_allocation_reporter 1.0 - - cpe:2.3:a:compaq:storage_allocation_reporter:1.0:*:*:*:*:*:*:*
compaq survey_utility 2.17 - - cpe:2.3:a:compaq:survey_utility:2.17:*:*:*:*:*:*:*
compaq survey_utility 2.18 - - cpe:2.3:a:compaq:survey_utility:2.18:*:*:*:*:*:*:*
compaq survey_utility 2.33 - - cpe:2.3:a:compaq:survey_utility:2.33:*:*:*:*:*:*:*
compaq system_healthcheck 3.0 - - cpe:2.3:a:compaq:system_healthcheck:3.0:*:*:*:*:*:*:*
digital unix 4.0f - - cpe:2.3:o:digital:unix:4.0f:*:*:*:*:*:*:*
digital unix 4.0g - - cpe:2.3:o:digital:unix:4.0g:*:*:*:*:*:*:*
digital unix 5.0 - - cpe:2.3:o:digital:unix:5.0:*:*:*:*:*:*:*
解决方案
中文解决方案:
(暂无数据)
英文解决方案:
(暂无数据)
临时解决方案:
(暂无数据)
参考链接
SSRT0705 vendor-advisory
cve.org
访问
20010116 iXsecurity.20001120.compaq-authbo.a mailing-list
cve.org
访问
2200 vdb-entry
cve.org
访问
CVSS评分详情
10.0
CRITICAL
CVSS向量: AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS版本: 2.0
机密性
COMPLETE
完整性
COMPLETE
可用性
COMPLETE
时间信息
发布时间:
2001-02-14 05:00:00
修改时间:
2024-08-08 04:06:55
创建时间:
2025-11-11 15:32:13
更新时间:
2025-11-11 15:48:45
利用信息
暂无可利用代码信息
数据源详情
数据源 记录ID 版本 提取时间
CVE cve_CVE-2001-0134 2025-11-11 15:17:21 2025-11-11 07:32:13
NVD nvd_CVE-2001-0134 2025-11-11 14:50:26 2025-11-11 07:40:59
CNNVD cnnvd_CNNVD-200103-064 2025-11-11 15:08:39 2025-11-11 07:48:45
版本与语言
当前版本: v3
主要语言: EN
支持语言:
EN ZH
安全公告
暂无安全公告信息
变更历史
v3 CNNVD
2025-11-11 15:48:45
vulnerability_type: 未提取 → 授权问题; cnnvd_id: 未提取 → CNNVD-200103-064; data_sources: ['cve', 'nvd'] → ['cnnvd', 'cve', 'nvd']
查看详细变更
  • vulnerability_type: 未提取 -> 授权问题
  • cnnvd_id: 未提取 -> CNNVD-200103-064
  • data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
v2 NVD
2025-11-11 15:40:59
severity: SeverityLevel.MEDIUM → SeverityLevel.CRITICAL; cvss_score: 未提取 → 10.0; cvss_vector: NOT_EXTRACTED → AV:N/AC:L/Au:N/C:C/I:C/A:C; cvss_version: NOT_EXTRACTED → 2.0; affected_products_count: 0 → 30; data_sources: ['cve'] → ['cve', 'nvd']
查看详细变更
  • severity: SeverityLevel.MEDIUM -> SeverityLevel.CRITICAL
  • cvss_score: 未提取 -> 10.0
  • cvss_vector: NOT_EXTRACTED -> AV:N/AC:L/Au:N/C:C/I:C/A:C
  • cvss_version: NOT_EXTRACTED -> 2.0
  • affected_products_count: 0 -> 30
  • data_sources: ['cve'] -> ['cve', 'nvd']