HP System Management Homepage (SMH) 2.1.3.132 when running on CompaqHTTPServer/9.9 on Windows Linux or Tru64 UNIX and when \Trust by Certificates\ is not enabled allows remote attackers to bypass authentication via a crafted URL.