CVE-2007-6195 - Buffer overflow in the sw_rpc_agent_init function in swagentd in Software Distributor (SD), and possibly other DCE applications, in HP HP-UX B.11.11 and B.11.23 allows remote attackers to execute arbitrary code or cause a denial of service via malformed arguments in an opcode 0x04 DCE RPC request

Back Back to CVE browser

HIGH

Buffer overflow in the sw_rpc_agent_init function in swagentd in Software Distributor (SD), and possibly other DCE applications, in HP HP-UX B.11.11 and B.11.23 allows remote attackers to execute arbitrary code or cause a denial of service via malformed arguments in an opcode 0x04 DCE RPC request

Published Dec 15, 2007

10.0

HIGH

CVSS 2.0

EPSS 13.74%

Description

Buffer overflow in the sw_rpc_agent_init function in swagentd in Software Distributor (SD), and possibly other DCE applications, in HP HP-UX B.11.11 and B.11.23 allows remote attackers to execute arbitrary code or cause a denial of service via malformed arguments in an opcode 0x04 DCE RPC request.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-119

Buffer Overflow

References (10)

http://secunia.com/advisories/28087
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/archive/1/485260/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/26855
vdb-entryx_refsource_BIDPatch
http://www.securitytracker.com/id?1019098
vdb-entryx_refsource_SECTRACK
http://www.vupen.com/english/advisories/2007/4220
vdb-entryx_refsource_VUPENVendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-07-079.html
x_refsource_MISC
http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01294212-1
vendor-advisoryx_refsource_HP
https://euvd.enisa.europa.eu/vulnerability/EUVD-2007-6163
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/39018
vdb-entryx_refsource_XF
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5710
vdb-entrysignaturex_refsource_OVAL

Link	Providers	Tags
http://secunia.com/advisories/28087		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/archive/1/485260/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/26855		vdb-entryx_refsource_BIDPatch
http://www.securitytracker.com/id?1019098		vdb-entryx_refsource_SECTRACK
http://www.vupen.com/english/advisories/2007/4220		vdb-entryx_refsource_VUPENVendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-07-079.html		x_refsource_MISC
http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01294212-1		vendor-advisoryx_refsource_HP
https://euvd.enisa.europa.eu/vulnerability/EUVD-2007-6163		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/39018		vdb-entryx_refsource_XF
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5710		vdb-entrysignaturex_refsource_OVAL