SOFTPAQ NUMBER:  SP16331
TITLE:  Compaq Power Management Agents for NT 4.0 and Windows 2000 Server
VERSION:  1.80 Rev C
LANGUAGE:  English

CATEGORY:  Drivers

DIVISIONS: Industry Standard Server Group

PRODUCTS AFFECTED:  Compaq Power Management

OPERATING SYSTEM:  Windows NT 4.0
                   Windows 2000

SYSTEM CONFIGURATION: A computer running one of the operating systems listed
                      above, that is running Compaq Power Management 1.8 or earlier.

PREREQUISITES: Compaq Insight Management agents 3.20 or above.

EFFECTIVE DATE:  Immediate

ELECTRONIC DISTRIBUTION ALLOWED:  Yes

SOFTPAQ UTILITY VERSION:  5.0

SUPERSEDES: SP14456

DESCRIPTION:
This softpaq contains the Windows NT 4.0 / Windows 2000 Compaq Power Management
Agents version 1.8C.  This release addresses a potential security vulnerability in Compaq web-enabled software, which allows the software to act as a generic proxy server.  Internal traffic going out to the Internet can bypass normal proxy server filtering using the Compaq web-enabled management software at port 2301 on the proxy server system. In addition external traffic may be able to infiltrate internal networks by using the Compaq web-enabled management software at port 2301 on a server exposed to the internet as a proxy if there is no additional firewall protection.

The only difference between previous versions of 1.8 and version 1.8C of the agents is 
CPQHMMO.DLL. The version of CPQHMMO.DLL should be 2.2.1.2 to resolve 
this potential issue. The version number can be obtained by viewing the properties
of the .DLL in the Windows File Explorer.

Alternatively Softpaq SP16318 can be used to patch an existing system.  SP16318
can be obtained from ftp.compaq.com.  It is recommended that the patch in SP16318
be used regardless of your configuration to ensure that all web enabled agents
in other Compaq applications are updated to the most current CPQHMMO.DLL.
        
If you are running a version of Compaq Power Management less than 1.8, this softpaq
can also be used to upgrade to the most current version Compaq Power Management.
Note that if you upgrade to version 1.8 of the agents you should also upgrade
the management console application to version 1.8 as well.

Enhancements/Fixes: 
                  This release is to fix a potential security issue
                  in the web-enabled portion of the agent.

HOW TO USE:

 1. Download the SoftPaq into a directory and change to that
    directory.  The file that is downloaded is an executable with
    a filename based on the SoftPaq Number above.

 2. From that drive and directory, execute the downloaded file.
    Change to the directory that contains the expanded files
    and launch Setup.exe. Follow the on-screen instructions to install
    the program.

 3. After the program is installed the softpaq and all 
    installation files expanded in the directory in step 1
    can be deleted.

Copyright 2001, Compaq Computer Corporation.  All rights reserved.

Product names mentioned herein may be trademarks and/or registered
trademarks of their respective companies.