CVE-2004-1811

HIGH 7.5CVE-2004-1811 · Published 31/12/2004 · updated 16/06/2026

In short

CVE-2004-1811 is a HIGH (CVSS 7.5) vulnerability affecting ssl http server (hp).
Chance of exploitation in the next 30 days (EPSS): 2.3%, higher than 83.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ssl http server hp	`= 5.0= 5.92`	No fix yet

Description

The SSL HTTP Server in HP Web-enabled Management Software 5.0 through 5.92, with anonymous access enabled, allows remote attackers to compromise the trusted certificates by uploading their own certificates.

References

archives.neohapsis.com/archives/vulnwatch/2004-q1/0057.html
marc.info
secunia.com/advisories/11126
ciac.org/ciac/bulletins/o-100.shtml · Patch
immunitysec.com/downloads/hp_http.sxw.pdf · Vendor Advisory
securityfocus.com/advisories/6448
securityfocus.com/bid/9859 · Patch
tru64.org/stories.php · Patch
exchange.xforce.ibmcloud.com/vulnerabilities/15466

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free