PatchTheCVECVE-2001-0134: Buffer overflow in cpqlogin.htm in web-enabled agents for various Compaq management software products such as
58
This month
HIGH 10.0DOWNGRADEDOWNGRADEDOWNGRADE
CVE-2001-0134 is a high-severity flaw (CVSS 10.0) affecting armada insight manager, enterprise volume manager-command scripter, foundation agents. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Buffer overflow in cpqlogin.htm in web-enabled agents for various Compaq management software products such as Insight Manager and Management Agents allows remote attackers to execute arbitrary commands via a long user name.
Why this priority
- Critical severity
- EPSS top 9%: very likely to be exploited
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 10.0 (High) |
| EPSS exploit chance | 4.0% (top 9%) |
| CISA exploited list | No |
| Published | 2001-03-12 |
| Last modified | 2026-06-16 |
Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
compaq armada insight manager DOWNGRADE
Affected: 4.20 · 4.20j
Fixed in: no fixed release known
Safe to downgrade to: a release before 4.20
1. Check installed version
apt-cache policy armada-insight-manager || rpm -q armada-insight-manager || armada-insight-manager --version
2. No fixed release: DOWNGRADE to a release before 4.20 (Debian / Ubuntu)
apt-cache madison armada-insight-manager
sudo apt install armada-insight-manager=<VERSION_BEFORE_4.20>
sudo apt-mark hold armada-insight-manager
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list armada-insight-manager
sudo dnf downgrade armada-insight-manager-<VERSION_BEFORE_4.20>
sudo dnf versionlock add armada-insight-manager
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
compaq enterprise volume manager-command scripter DOWNGRADE
Affected: 1.0 · 1.1
Fixed in: no fixed release known
Safe to downgrade to: a release before 1.0
1. Check installed version
apt-cache policy enterprise-volume-manager-command-scripter || rpm -q enterprise-volume-manager-command-scripter || enterprise-volume-manager-command-scripter --version
2. No fixed release: DOWNGRADE to a release before 1.0 (Debian / Ubuntu)
apt-cache madison enterprise-volume-manager-command-scripter
sudo apt install enterprise-volume-manager-command-scripter=<VERSION_BEFORE_1.0>
sudo apt-mark hold enterprise-volume-manager-command-scripter
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list enterprise-volume-manager-command-scripter
sudo dnf downgrade enterprise-volume-manager-command-scripter-<VERSION_BEFORE_1.0>
sudo dnf versionlock add enterprise-volume-manager-command-scripter
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
compaq foundation agents DOWNGRADE
Affected: 1.0 · 2.1 · 4.0 · 4.90
Fixed in: no fixed release known
Safe to downgrade to: a release before 1.0
1. Check installed version
apt-cache policy foundation-agents || rpm -q foundation-agents || foundation-agents --version
2. No fixed release: DOWNGRADE to a release before 1.0 (Debian / Ubuntu)
apt-cache madison foundation-agents
sudo apt install foundation-agents=<VERSION_BEFORE_1.0>
sudo apt-mark hold foundation-agents
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list foundation-agents
sudo dnf downgrade foundation-agents-<VERSION_BEFORE_1.0>
sudo dnf versionlock add foundation-agents
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
compaq insight management agent DOWNGRADE
Affected: 4.37e
Fixed in: no fixed release known
Safe to downgrade to: a release before 4.37e
1. Check installed version
apt-cache policy insight-management-agent || rpm -q insight-management-agent || insight-management-agent --version
2. No fixed release: DOWNGRADE to a release before 4.37e (Debian / Ubuntu)
apt-cache madison insight-management-agent
sudo apt install insight-management-agent=<VERSION_BEFORE_4.37e>
sudo apt-mark hold insight-management-agent
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list insight-management-agent
sudo dnf downgrade insight-management-agent-<VERSION_BEFORE_4.37e>
sudo dnf versionlock add insight-management-agent
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
compaq insight management desktop web agent DOWNGRADE
Affected: 3.7
Fixed in: no fixed release known
Safe to downgrade to: a release before 3.7
1. Check installed version
apt-cache policy insight-management-desktop-web-agent || rpm -q insight-management-desktop-web-agent || insight-management-desktop-web-agent --version
2. No fixed release: DOWNGRADE to a release before 3.7 (Debian / Ubuntu)
apt-cache madison insight-management-desktop-web-agent
sudo apt install insight-management-desktop-web-agent=<VERSION_BEFORE_3.7>
sudo apt-mark hold insight-management-desktop-web-agent
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list insight-management-desktop-web-agent
sudo dnf downgrade insight-management-desktop-web-agent-<VERSION_BEFORE_3.7>
sudo dnf versionlock add insight-management-desktop-web-agent
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
compaq insight manager lc DOWNGRADE
Affected: 1.3c · 1.50a
Fixed in: no fixed release known
Safe to downgrade to: a release before 1.3c
1. Check installed version
apt-cache policy insight-manager-lc || rpm -q insight-manager-lc || insight-manager-lc --version
2. No fixed release: DOWNGRADE to a release before 1.3c (Debian / Ubuntu)
apt-cache madison insight-manager-lc
sudo apt install insight-manager-lc=<VERSION_BEFORE_1.3c>
sudo apt-mark hold insight-manager-lc
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list insight-manager-lc
sudo dnf downgrade insight-manager-lc-<VERSION_BEFORE_1.3c>
sudo dnf versionlock add insight-manager-lc
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2001-0134?
armada insight manager: downgrade or apply the listed mitigation; enterprise volume manager-command scripter: downgrade or apply the listed mitigation; foundation agents: downgrade or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2001-0134 being exploited?
CVE-2001-0134 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2001-0134 affect?
CVE-2001-0134 affects armada insight manager, enterprise volume manager-command scripter, foundation agents. Severity is high (CVSS 10.0). Buffer overflow in cpqlogin.htm in web-enabled agents for various Compaq management software products such as Insight Manager and Management Agents allows remote attackers to execute arbitrary commands via a long user name.
How urgent is CVE-2001-0134?
Priority 58/100. Critical severity; EPSS top 9%: very likely to be exploited