HTTP Server versions VS HP System Management Homepage Version 2?

[Jaime_39]

Hi,

In the HP Web-Enabled Management Software Security Patch for Windows, an issue has been discovered within HP HTTP Server versions 5.0 through 5.94.
When I verify the version of HP HTTP Server by viewing the bottom left corner of the System Management Homepage.
It shows me HP System Management homepage version 2.0.1.104.

Does it mean that I do not have to install the patches?
Pls reply. Tks.

[Darren Z]

Someone correct me if I'm wrong but you are looking at the version for the HP System Management Homepage which you pointed out. On the System Management home page you should see a link on the left labeled 'Insight Mangement Agents" If you click on that it should tell you the version of the "Insight Management Agents" Web Interface an I believe this is what you are looking for.

[Joel Rubenstein]

Yes, that is correct you do not have to install the patch if you are using the new version of the System Management Homepage.

[Haridas]

Jaime,

You do not have to install the patch if you see "HP System Management homepage version 2.0.1.104".

Even if Insight Management Agents show HTTP Server version 5.9x, Do not worry. Port 2381 is served only by System Management Homepage 2.0.1.104.

Insight Management Agent and other HP web apps request will be processed via the System Management Homepage.

[Jaime_39]

It mentioned that there were a few products affected by this vulnerability.
1. HP HTTP Server Ver 5.95 and prior
2. HP Insight Management Agents for Servers
3. HP Version Control Repository Agent
4. HP Version Control Agent
and so on...

So does it mean that I can:
1. Upgrade each individual products which are affected?
2. Upgrade only the HTTP Server to System Management Homepage?
3. Have to use the patch?

[Haridas]

Let say, You have these products installed.
1. HP Insight Management Agents for Servers
2. HP Version Control Repository Agent
3. HP Version Control Agent
and so on...

when you browse to https://mysystem:2381/
if you see the version as "HP HTTP Server Ver 5.95" or prior, then You need to apply the patch. If the version shows 2.0.1.104,
You don't need this patch. You already have the latest version.

Lets assume, you have "HP HTTP Server Ver 5.95" or prior. Then exract the patch that you downloaded from the website. Open a Command prompt. Then type "patchweb patch" and hit enter. This batch file will automatically locate all the products listed above and apply the patch. After applying the patch, when you browse to https://mysystem:2381/, the version should say "HP HTTP Server Ver 5.96".