CVE-1999-0771

Compaq Management Agents - Unauthenticated Arbitrary File Read via Dot-Dot Attack

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-1999-0771. PoCs published by Master Dogen.

AI-analyzed exploit summary This is a vulnerability writeup describing a directory traversal flaw in Compaq Management Agents and Survey Utility, allowing remote attackers to access arbitrary files via crafted URLs. It also mentions a DoS vulnerability triggered by long requests.

Description

The web components of Compaq Management Agents and the Compaq Survey Utility allow a remote attacker to read arbitrary files via a .. (dot dot) attack.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Master Dogen · textdosmultiple
https://www.exploit-db.com/exploits/19225

This is a vulnerability writeup describing a directory traversal flaw in Compaq Management Agents and Survey Utility, allowing remote attackers to access arbitrary files via crafted URLs. It also mentions a DoS vulnerability triggered by long requests.

Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: Compaq Management Agents 4.0+, Compaq Survey Utility 2.0+
Auth required
Prerequisites: Network access to port 2301 · Valid credentials (default or known)
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (1)

Core 1
Core References
Third Party Advisory, VDB Entry x_refsource_misc
https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0771

Scores

EPSS 0.0624
EPSS Percentile 92.7%

Details

Status published
Products (2)
compaq/insight_management_agent
compaq/power_management 2.0
Published May 26, 1999
Tracked Since Feb 18, 2026