SOFTPAQ NUMBER: SP16332 TITLE: Compaq Power Management Agents for NT 4.0 and Windows 2000 Server VERSION: 1.80 Rev C LANGUAGE: Japanese CATEGORY: Drivers DIVISIONS: Industry Standard Server Group PRODUCTS AFFECTED: Compaq Power Management OPERATING SYSTEM: Windows NT 4.0 Windows 2000 SYSTEM CONFIGURATION: A computer running one of the operating systems listed above, that is running Compaq Power Management 1.8 or earlier. PREREQUISITES: Compaq Insight Management agents 3.20 or above. EFFECTIVE DATE: Immediate ELECTRONIC DISTRIBUTION ALLOWED: Yes SOFTPAQ UTILITY VERSION: 5.0 SUPERSEDES: SP14457 DESCRIPTION: This softpaq contains the Windows NT 4.0 / Windows 2000 Compaq Power Management Agents version 1.8C. This release addresses a potential security vulnerability in Compaq web-enabled software, which allows the software to act as a generic proxy server. Internal traffic going out to the Internet can bypass normal proxy server filtering using the Compaq web-enabled management software at port 2301 on the proxy server system. In addition external traffic may be able to infiltrate internal networks by using the Compaq web-enabled management software at port 2301 on a server exposed to the internet as a proxy if there is no additional firewall protection. The only difference between previous versions of 1.8 and version 1.8C of the agents is CPQHMMO.DLL. The version of CPQHMMO.DLL should be 2.2.1.2 to resolve this potential issue. The version number can be obtained by viewing the properties of the .DLL in the Windows File Explorer. Alternatively Softpaq SP16318 can be used to patch an existing system. SP16318 can be obtained from ftp.compaq.com. It is recommended that the patch in SP16318 be used regardless of your configuration to ensure that all web enabled agents in other Compaq applications are updated to the most current CPQHMMO.DLL. If you are running a version of Compaq Power Management less than 1.8, this softpaq can also be used to upgrade to the most current version Compaq Power Management. Note that if you upgrade to version 1.8 of the agents you should also upgrade the management console application to version 1.8 as well. Enhancements/Fixes: This release is to fix a potential security issue in the web-enabled portion of the agent. HOW TO USE: 1. Download the SoftPaq into a directory and change to that directory. The file that is downloaded is an executable with a filename based on the SoftPaq Number above. 2. From that drive and directory, execute the downloaded file. Change to the directory that contains the expanded files and launch Setup.exe. Follow the on-screen instructions to install the program. 3. After the program is installed the softpaq and all installation files expanded in the directory in step 1 can be deleted. Copyright 2001, Compaq Computer Corporation. All rights reserved. Product names mentioned herein may be trademarks and/or registered trademarks of their respective companies.