Vulnerability Details : CVE-2007-6195

Buffer overflow in the sw_rpc_agent_init function in swagentd in Software Distributor (SD), and possibly other DCE applications, in HP HP-UX B.11.11 and B.11.23 allows remote attackers to execute arbitrary code or cause a denial of service via malformed arguments in an opcode 0x04 DCE RPC request.

Vulnerability category: OverflowExecute codeDenial of service

Published 2007-12-15 01:46:00

Updated 2018-10-15 21:50:51

Source MITRE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2007-6195

Probability of exploitation activity in the next 30 days: 49.46%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 97 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2007-6195

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Source
10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C	10.0	10.0	nvd@nist.gov
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

CWE ids for CVE-2007-6195

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2007-6195

Products affected by CVE-2007-6195

HP » Hp-ux » Version: 11.11
cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*
Matching versions
HP » Hp-ux » Version: 11.23
cpe:2.3:o:hp:hp-ux:11.23:*:*:*:*:*:*:*
Matching versions