CVE-2004-1811 The SSL HTTP Server in HP Web-enabled Management Software 5.0 through 5.92, with anonymous access enabled, allows remote attackers to compromise the trusted certificates by uploading their own certifi...
HighCVSS 7.5
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The SSL HTTP Server in HP Web-enabled Management Software 5.0 through 5.92, with anonymous access enabled, allows remote attackers to compromise the trusted certificates by uploading their own certificates.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc ssl http server | = 5.0 | No fix listed |
| HP Inc ssl http server | = 5.92 | No fix listed |
References
- 20040315 Immunity Advisory: Compaq Web Management vulnerability mailing-list
- 20040314 Multiple Immunity Advisories mailing-list
- 11126 third-party-advisory
- O-100 government-resource patch third-party-advisory
- www.immunitysec.com vendor-advisory
- SSRT4679 vendor-advisory
- 9859 patch vdb-entry
- HPSBMA01003 patch vendor-advisory
- hp-http-certificate-upload(15466) vdb-entry