HP-UX swagentd远程溢出漏洞

BUGTRAQ ID: 26855 CVECAN ID: CVE-2007-6195 HP-UX是一款HP公司开发的UNIX操作系统。 HP-UX操作系统的swagentd中所定义的swrpcagentinit函数（opcode 0x04）中存在缓冲区溢出漏洞，如果远程攻击者向该函数传送了畸形参数的话，就可以触发这个溢出，导致覆盖指针，因此可能会出现拒绝服务或执行任意指令。 HP HP-UX B.11.23 HP HP-UX B.11.11 HP已经为此发布了一个安全公告（HPSBUX02294）以及相应补丁: HPSBUX02294：SSRT071451 rev.1 - HP-UX...

ZDI-07-079: Hewlett-Packard HP-UX swagentd Buffer Overflow Vulnerability

ZDI-07-079: Hewlett-Packard HP-UX swagentd Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-079.html December 17, 2007 -- CVE ID: CVE-2007-6195 -- Affected Vendor: Hewlett-Packard -- Affected Products: HP-UX 11.11 -- TippingPointTM IPS Customer Protection:...

[security bulletin] HPSBUX02294 SSRT071451 rev.1 - HP-UX Running DCE, Remote Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01294212 Version: 1 HPSBUX02294 SSRT071451 rev.1 - HP-UX Running DCE, Remote Denial of Service DoS NOTICE: The information in this Security Bulletin should be acted upon as soon as possible...

CVE-2007-6195

HP-UX vulnerability CVE-2007-6195 affects swagentd (Software Distributor) on HP-UX B.11.11 and B.11.23. The flaw is in sw_rpc_agent_init (opcode 0x04) where malformed DCE RPC arguments can trigger a buffer overflow, enabling remote arbitrary code execution or a Denial of Service. HP released fixe...