HP Web-enabled Management Software HTTP Server unauthorized certificate upload
| hp-http-certificate-upload (15466) |  Medium Risk |
Description:
HP Web-enabled Management Software (formerly known as Compaq Web-based Management Software) could allow a remote attacker to upload unauthorized certificates to the server, caused by a vulnerability in the HP HTTP Server component. If the Anonymous Access option is enabled in the HP Web-enabled Management Software, which is not the default configuration, a remote anonymous attacker could send specially-crafted group configuration requests to TCP port 2381 to compromise the server's Trusted Certificates setting.
Consequences:
Bypass Security
Remedy:
Upgrade to the latest version of HP HTTP Server (5.93 or later), as listed in Hewlett-Packard Security Bulletin HPSBMA01003. See References.
References:
- CIAC Information Bulletin O-100: Certificate Compromise using HP HTTP Server.
- Hewlett Packard Security Bulletin HPSBMA01003: SSRT4679 - HP Web-enabled Management Software certificate compromise using HP HTTP Server certificate compromise using HP HTTP Server.
- VulnWatch Mailing List, Fri Mar 12 2004 - 15:48:02 CST : Immunity Advisory: Compaq Web Management vulnerability.
- BID-9859: HP HTTP Server Trusted Certificate Compromise Vulnerability
- CVE-2004-1811: The SSL HTTP Server in HP Web-enabled Management Software 5.0 through 5.92, with anonymous access enabled, allows remote attackers to compromise the trusted certificates by uploading their own certificates.
- OSVDB ID: 42509: HTTP File Server (HFS) Account Name Log Overflow DoS
- SA11126: HP Web Based Management Anonymous Certificate Upload Vulnerability
Platforms Affected:
- HP HTTP Server 5.0
- HP HTTP Server 5.92
Reported:
Mar 12, 2004
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email ignore thisxforceignore this@ignore thisus.ignore thisibm.comignore this