Description
The SSL HTTP Server in HP Web-enabled Management Software 5.0 through 5.92, with anonymous access enabled, allows remote attackers to compromise the trusted certificates by uploading their own certificates.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://marc.info/?l=bugtraq&m=107936784030214&w=2 ↗
- http://www.securityfocus.com/bid/9859 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15466 ↗
- http://secunia.com/advisories/11126 ↗
- http://www.securityfocus.com/advisories/6448 ↗
- http://www.immunitysec.com/downloads/hp_http.sxw.pdf ↗
- http://www.tru64.org/stories.php?story=04/03/12/0204078 ↗
- http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0057.html ↗
- http://www.ciac.org/ciac/bulletins/o-100.shtml ↗