COMMAND

	HP Procurve 4000M Stacked Switch HTTP Reset

SYSTEMS AFFECTED

	Firmware revision C.09.13

PROBLEM

	Brook    Powers     [bugtraq@tech-serve.com]     and     Tony     Kapela
	[tony@wi.engr.wisc.edu] explains in their advisory :
	

	http://www.tech-serve.com/research/advisories/2002/a092302-1.txt

	

	that accessing the management URL for the stacked switch :
	

	http://<IP ADDRESS>/sw2/cgi/device_reset?

	

	is permitted without prior authentification.

SOLUTION

	None yet