CVE-2002-0250

Web configuration utility in HP AdvanceStack hubs J3200A through J3210A with firmware version A.03.07 and earlier, allows unauthorized users to bypass authentication via a direct HTTP request to the web_access.html file, which allows the user to change the switch's configuration and modify the administrator password.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2002-05-29

Last modified

2024-08-08

Affected products

• Advancestack 10base-t Switching Hub J3200a (Hp)
• Advancestack 10base-t Switching Hub J3201a (Hp)
• Advancestack 10base-t Switching Hub J3202a (Hp)
• Advancestack 10base-t Switching Hub J3203a (Hp)
• Advancestack 10base-t Switching Hub J3204a (Hp)
• Advancestack 10base-t Switching Hub J3205a (Hp)
• Advancestack 10base-t Switching Hub J3210a (Hp)

References

• http://marc.info/?l=bugtraq&m=101318469216213&w=2
• http://online.securityfocus.com/advisories/3870
• http://www.iss.net/security_center/static/8124.php
• http://www.securityfocus.com/bid/4062