Vulnerability Assessment & Network Security Forums

If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important. If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.

Home >> Browse Vulnerability Assessment Database >> General >> Compaq Web Based Management Agent Proxy Vulnerability

Vulnerability Assessment Details

Compaq Web Based Management Agent Proxy Vulnerability

Vulnerability Assessment Summary
Compaq Web Based Management Agent Proxy Vulnerability

Detailed Explanation for this Vulnerability Assessment

This host is running the Compaq Web Management
Agent. This service can be used as an HTTP
proxy. A possible hacker can use this to bypass
firewall rules or hide the source of web-based
attacks.

Solution: Due to the information leak associated
with this service, we recommend that you disable
the Compaq Management Agent or filter access to
TCP ports 2301 and 280.

If this service is required, installing the
appropriate upgrade from Compaq will fix this
issue. The software update for your operating
system and hardware can be found via Compaq's
support download page:
http://www.compaq.com/support/files/server/us/index.html

For more information, please see the vendor advisory at:
http://www.compaq.com/products/servers/management/SSRT0758.html

Network Security Threat Level: Medium

Networks Security ID:

Vulnerability Assessment Copyright: This script is Copyright (C) 2002 Digital Defense Inc.

Cables, Connectors