CVE-2006-1774: HP Compaqhttpserver

High severity, CVSS 7.5. EPSS: 2.8% chance of exploitation in the next 30 days.

HP System Management Homepage (SMH) 2.1.3.132, when running on CompaqHTTPServer/9.9 on Windows, Linux, or Tru64 UNIX, and when "Trust by Certificates" is not enabled, allows remote attackers to bypass authentication via a crafted URL.

Affected products

  • HP Compaqhttpserver: version 9.9 only
  • HP System Management Homepage: version 2.1.3.132 only

Published 2006-04-13. Last modified 2026-06-16.