OSVDB ID: 2070

Title: Compaq Insight Agent SSL overflow

Info

Disclosure
Jul 30, 2002

Discovery
Jul 30, 2002

Dates

Exploit
Unknown

Solution
Unknown

Description

 The Compaq Insight Management Agents use a vulnerable version of OpenSSL, which contains many remotely-exploitable buffer overflows. The vendor lists the affected products and versions as "Insight Management Agents for Windows version 5.3 - 5.5, Insight Manager 7, Version Control Agents, Version Control Repository Manager, Array Configuration Utility, HP Survey Utility for Windows, and Intelligent Cluster Administrator." Insight Management Agents for non-Windows platforms are listed as non-vulnerable.

Classification

 Attack Type: Input Manipulation

Solution

 Compaq has released various patches for the vulnerable software components.

Products

Hewlett-Packard Development Company, L.P.

Array Configuration Utility

 Unknown or Unspecified

Insight Management Agents

 5.3
5.4
5.5

Insight Manager

 7

Intelligent Cluster Administrator

 Unknown or Unspecified

Survey Utility

 Unknown or Unspecified

Version Control Agents

 Unknown or Unspecified

Version Control Repository Manager

 Unknown or Unspecified

References

Credit

Unknown or Incomplete


Direct URL: http://osvdb.org/36218