Compaq WBEM HTTP Server Remote Overflow

critical Nessus Plugin ID 17997

Synopsis

The remote web server is affected by a buffer overflow vulnerability.

Description

The remote host is running a Compaq Web Management server.

The remote version of this software is vulnerable to an unspecified buffer overflow that may allow an attacker to execute arbitrary code on the remote host with the privileges of the web server process.

Solution

Upgrade to HP HTTP Server version 5.96 or later or to the System Management Homepage Version 2.0 or later.

See Also

http://www.securityfocus.com/advisories/8087

http://www.nessus.org/u?4840e0e7

Plugin Details

Severity: Critical

ID: 17997

File Name: compaq_wbem_overflow.nasl

Version: 1.20

Type: remote

Family: Web Servers

Published: 4/7/2005

Updated: 7/6/2018

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 7.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 5/10/2005

Vulnerability Publication Date: 2/15/2005

Reference Information

CVE: CVE-2005-4823

BID: 12566