Unscored severity · published Dec 6, 2001
CVE-2001-0840
Buffer overflow in Compaq Insight Manager XE 2.1b and earlier allows remote attackers to execute arbitrary code via (1) SNMP and (2) DMI
–
CVSS
9%
EPSS
No
On KEV
Description
Buffer overflow in Compaq Insight Manager XE 2.1b and earlier allows remote attackers to execute arbitrary code via (1) SNMP and (2) DMI.
Exploitation
Is it being used?
Exploit prediction (EPSS)9.0% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IM
Insight Manager XE · Compaq
1.0; 1.21; 2.1; 2.1b · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2001-0840
CVE.org
https://www.cve.org/CVERecord?id=CVE-2001-0840
Patch
http://www.compaq.com/products/servers/management/mgtsw-advisory.html
www.iss.net
http://www.iss.net/security_center/static/7411.php
US Government Resource
http://www.kb.cert.org/vuls/id/908611
Patch
http://www.securityfocus.com/bid/3482
More from Insight Manager XE
–
CVE-2000-1209
The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) 1.0, including third party packages…
–
CVE-2001-0134
Buffer overflow in cpqlogin.htm in web-enabled agents for various Compaq management software products such as Insight Manager and Management Agents allows remote attackers to…