Description
The SSL HTTP Server in HP Web-enabled Management Software 5.0 through 5.92, with anonymous access enabled, allows remote attackers to compromise the trusted certificates by uploading their own certificates.
References
- 20040314 Multiple Immunity Advisories mailing-list
- 9859 vdb-entry
- hp-http-certificate-upload(15466) vdb-entry
- 11126 third-party-advisory
- SSRT4679 vendor-advisory
- http://www.immunitysec.com/downloads/hp_http.sxw.pdf
- HPSBMA01003 vendor-advisory
- 20040315 Immunity Advisory: Compaq Web Management vulnerability mailing-list
- O-100 third-party-advisory government-resource