CVE-2007-6195: Buffer Overflow

Published Dec 15, 2007

Updated

Buffer overflow in the swrpcagentinit function in swagentd in Software Distributor (SD), and possibly other DCE applications, in HP HP-UX B.11.11 and B.11.23 allows remote attackers to execute arbitrary code or cause a denial of service via malformed arguments in an opcode 0x04 DCE RPC request.

Affected Software

2 affected components

HPE HP-UX=11.11

HPE HP-UX=11.23

Remediation

Patch Available

http://www.securityfocus.com/bid/26855

Event History

Dec 15, 2007

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-6195?

The severity of CVE-2007-6195 is considered high due to the potential for remote code execution and denial of service.

How do I fix CVE-2007-6195?

To fix CVE-2007-6195, apply the relevant patches provided by HP for HP-UX versions 11.11 and 11.23.

Who is affected by CVE-2007-6195?

CVE-2007-6195 affects users of HP-UX versions 11.11 and 11.23 running the swagentd component.

What type of vulnerability is CVE-2007-6195?

CVE-2007-6195 is classified as a buffer overflow vulnerability in the sw_rpc_agent_init function.

Can CVE-2007-6195 be exploited remotely?

Yes, CVE-2007-6195 can be exploited remotely via malformed DCE RPC requests.