CVE-1999-0771

Description

The web components of Compaq Management Agents and the Compaq Survey Utility allow a remote attacker to read arbitrary files via a .. (dot dot) attack.

Affected products

• compaq / insight_management_agent
• compaq / power_management2.0 – 2.0

Exploits & proofs of concept

• exploit-dbCompaq Client Management Agents 3.70/4.0 / Insight Management Agents 4.21 A/4.22 A/4.30 A / Intelligent Cluster Administrator 1.0 / Management Agents for Workstations 4.20 A / Server Management Agents 4.23 / Survey Utility 2.0 - Web File Accessby Master Dogen

References

• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0771