Vulnerabilities > CVE-2006-1389 - Remote Denial Of Service vulnerability in HP Hp-Ux 11.00/11.11/11.4
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
NONE Availability impact
COMPLETE Summary
Unspecified vulnerability in swagentd in HP-UX B.11.00, B.11.04, and B.11.11 allows remote attackers to cause a denial of service (application crash) via unspecified vectors.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
OS | 3 |
Nessus
NASL family HP-UX Local Security Checks NASL id HPUX_PHCO_30006.NASL description s700_800 11.04 (VVOS) Software Distributor (SD) Cumulative : The remote HP-UX host is affected by multiple vulnerabilities : - A potential security vulnerability has been identified in HP-UX running swagentd. The vulnerability could be exploited remotely by an unauthenticated user to cause swagentd to abort resulting in a Denial of Service (DoS). References: HPSBUX0311-299 SSRT3660. (HPSBUX02105 SSRT061134) - SD utilities (swinstall(1M), swverify(1M) and others) have a locally exploitable buffer overflow. (HPSBUX00293 SSRT3656) last seen 2020-06-01 modified 2020-06-02 plugin id 16501 published 2005-02-16 reporter This script is Copyright (C) 2005-2018 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/16501 title HP-UX PHCO_30006 : s700_800 11.04 (VVOS) Software Distributor (SD) Cumulative code # # (C) Tenable Network Security, Inc. # # The descriptive text and patch checks in this plugin were # extracted from HP patch PHCO_30006. The text itself is # copyright (C) Hewlett-Packard Development Company, L.P. # include("compat.inc"); if (description) { script_id(16501); script_version("1.16"); script_cvs_date("Date: 2018/08/10 18:07:07"); script_cve_id("CVE-2006-1389"); script_xref(name:"HP", value:"emr_na-c00622788"); script_xref(name:"HP", value:"emr_na-c00909785"); script_xref(name:"HP", value:"HPSBUX00293"); script_xref(name:"HP", value:"HPSBUX02105"); script_xref(name:"HP", value:"SSRT061134"); script_xref(name:"HP", value:"SSRT3656"); script_name(english:"HP-UX PHCO_30006 : s700_800 11.04 (VVOS) Software Distributor (SD) Cumulative"); script_summary(english:"Checks for the patch in the swlist output"); script_set_attribute( attribute:"synopsis", value:"The remote HP-UX host is missing a security-related patch." ); script_set_attribute( attribute:"description", value: "s700_800 11.04 (VVOS) Software Distributor (SD) Cumulative : The remote HP-UX host is affected by multiple vulnerabilities : - A potential security vulnerability has been identified in HP-UX running swagentd. The vulnerability could be exploited remotely by an unauthenticated user to cause swagentd to abort resulting in a Denial of Service (DoS). References: HPSBUX0311-299 SSRT3660. (HPSBUX02105 SSRT061134) - SD utilities (swinstall(1M), swverify(1M) and others) have a locally exploitable buffer overflow. (HPSBUX00293 SSRT3656)" ); # http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00909785 script_set_attribute( attribute:"see_also", value:"http://www.nessus.org/u?1f3ddad3" ); # http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00622788 script_set_attribute( attribute:"see_also", value:"http://www.nessus.org/u?e92e3fa2" ); script_set_attribute( attribute:"solution", value:"Install patch PHCO_30006 or subsequent." ); script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"cpe:/o:hp:hp-ux"); script_set_attribute(attribute:"patch_publication_date", value:"2006/04/02"); script_set_attribute(attribute:"plugin_publication_date", value:"2005/02/16"); script_set_attribute(attribute:"vuln_publication_date", value:"2006/03/24"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2005-2018 Tenable Network Security, Inc."); script_family(english:"HP-UX Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/HP-UX/version", "Host/HP-UX/swlist"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("hpux.inc"); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); if (!get_kb_item("Host/HP-UX/version")) audit(AUDIT_OS_NOT, "HP-UX"); if (!get_kb_item("Host/HP-UX/swlist")) audit(AUDIT_PACKAGE_LIST_MISSING); if (!hpux_check_ctx(ctx:"11.04")) { exit(0, "The host is not affected since PHCO_30006 applies to a different OS release."); } patches = make_list("PHCO_30006", "PHCO_34814"); foreach patch (patches) { if (hpux_installed(app:patch)) { exit(0, "The host is not affected because patch "+patch+" is installed."); } } flag = 0; if (hpux_check_patch(app:"SW-DIST.SD-AGENT", version:"B.11.04")) flag++; if (hpux_check_patch(app:"SW-DIST.SD-CMDS", version:"B.11.04")) flag++; if (hpux_check_patch(app:"SW-DIST.SD-ENG-A-MAN", version:"B.11.04")) flag++; if (hpux_check_patch(app:"SW-DIST.SD-FAL", version:"B.11.04")) flag++; if (hpux_check_patch(app:"SW-DIST.SD-HELP", version:"B.11.04")) flag++; if (hpux_check_patch(app:"SW-DIST.SD-JPN-E-HELP", version:"B.11.04")) flag++; if (hpux_check_patch(app:"SW-DIST.SD-JPN-E-MAN", version:"B.11.04")) flag++; if (hpux_check_patch(app:"SW-DIST.SD-JPN-E-MSG", version:"B.11.04")) flag++; if (hpux_check_patch(app:"SW-DIST.SD-JPN-S-HELP", version:"B.11.04")) flag++; if (hpux_check_patch(app:"SW-DIST.SD-JPN-S-MAN", version:"B.11.04")) flag++; if (hpux_check_patch(app:"SW-DIST.SD-JPN-S-MSG", version:"B.11.04")) flag++; if (flag) { if (report_verbosity > 0) security_hole(port:0, extra:hpux_report_get()); else security_hole(0); exit(0); } else audit(AUDIT_HOST_NOT, "affected");
NASL family HP-UX Local Security Checks NASL id HPUX_PHSS_30302.NASL description s700_800 11.04 (VVOS) DCE/9000 1.7 Runtime cumulative patch : The remote HP-UX host is affected by multiple vulnerabilities : - Potential security vulnerability in DCE. (HPSBUX00299 SSRT3660) - A potential security vulnerability has been identified in HP-UX running swagentd. The vulnerability could be exploited remotely by an unauthenticated user to cause swagentd to abort resulting in a Denial of Service (DoS). References: HPSBUX0311-299 SSRT3660. (HPSBUX02105 SSRT061134) last seen 2020-06-01 modified 2020-06-02 plugin id 17119 published 2005-02-16 reporter This script is Copyright (C) 2005-2018 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/17119 title HP-UX PHSS_30302 : s700_800 11.04 (VVOS) DCE/9000 1.7 Runtime cumulative patch NASL family HP-UX Local Security Checks NASL id HPUX_PHSS_29964.NASL description s700_800 11.11 HP DCE/9000 1.8 DCE Client IPv6 patch : The remote HP-UX host is affected by multiple vulnerabilities : - Potential security vulnerability in B.11.11 DCE. (HPSBUX00276 SSRT3620) - A potential security vulnerability has been identified in HP-UX running swagentd. The vulnerability could be exploited remotely by an unauthenticated user to cause swagentd to abort resulting in a Denial of Service (DoS). References: HPSBUX0311-299 SSRT3660. (HPSBUX02105 SSRT061134) - Potential security vulnerability in DCE. (HPSBUX00299 SSRT3660) last seen 2020-06-01 modified 2020-06-02 plugin id 16586 published 2005-02-16 reporter This script is Copyright (C) 2005-2018 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/16586 title HP-UX PHSS_29964 : s700_800 11.11 HP DCE/9000 1.8 DCE Client IPv6 patch NASL family HP-UX Local Security Checks NASL id HPUX_PHSS_29963.NASL description s700_800 11.00 HP DCE/9000 1.7 Runtime cumulative patch : The remote HP-UX host is affected by multiple vulnerabilities : - Potential security vulnerability in DCE. (HPSBUX00299 SSRT3660) - A potential security vulnerability has been identified in HP-UX running swagentd. The vulnerability could be exploited remotely by an unauthenticated user to cause swagentd to abort resulting in a Denial of Service (DoS). References: HPSBUX0311-299 SSRT3660. (HPSBUX02105 SSRT061134) last seen 2020-06-01 modified 2020-06-02 plugin id 16587 published 2005-02-16 reporter This script is Copyright (C) 2005-2018 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/16587 title HP-UX PHSS_29963 : s700_800 11.00 HP DCE/9000 1.7 Runtime cumulative patch NASL family HP-UX Local Security Checks NASL id HPUX_PHCO_28848.NASL description s700_800 11.11 Software Distributor Cumulative Patch : The remote HP-UX host is affected by multiple vulnerabilities : - A potential security vulnerability has been identified in HP-UX running swagentd. The vulnerability could be exploited remotely by an unauthenticated user to cause swagentd to abort resulting in a Denial of Service (DoS). References: HPSBUX0311-299 SSRT3660. (HPSBUX02105 SSRT061134) - SD utilities (swinstall(1M), swverify(1M) and others) have a locally exploitable buffer overflow. (HPSBUX00293 SSRT3656) last seen 2020-06-01 modified 2020-06-02 plugin id 16981 published 2005-02-16 reporter This script is Copyright (C) 2005-2018 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/16981 title HP-UX PHCO_28848 : s700_800 11.11 Software Distributor Cumulative Patch NASL family HP-UX Local Security Checks NASL id HPUX_PHCO_28847.NASL description s700_800 11.00 Software Distributor (SD) Cumulative Patch : The remote HP-UX host is affected by multiple vulnerabilities : - SD utilities (swinstall(1M), swverify(1M) and others) have a locally exploitable buffer overflow. (HPSBUX00293 SSRT3656) - A potential security vulnerability has been identified in HP-UX running swagentd. The vulnerability could be exploited remotely by an unauthenticated user to cause swagentd to abort resulting in a Denial of Service (DoS). References: HPSBUX0311-299 SSRT3660. (HPSBUX02105 SSRT061134) last seen 2020-06-01 modified 2020-06-02 plugin id 16982 published 2005-02-16 reporter This script is Copyright (C) 2005-2018 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/16982 title HP-UX PHCO_28847 : s700_800 11.00 Software Distributor (SD) Cumulative Patch
Oval
accepted 2014-03-24T04:00:05.652-04:00 class vulnerability contributors name Robert L. Hollis organization ThreatGuard, Inc. name Matthew Wojcik organization The MITRE Corporation name Todd Dolinsky organization Opsware, Inc. name Michael Wood organization Hewlett-Packard name Sushant Kumar Singh organization Hewlett-Packard
description Unspecified vulnerability in swagentd in HP-UX B.11.00, B.11.04, and B.11.11 allows remote attackers to cause a denial of service (application crash) via unspecified vectors. family unix id oval:org.mitre.oval:def:1031 status accepted submitted 2006-09-22T05:48:00.000-04:00 title HP-UX Running swagentd Remote Denial of Service (DoS) version 43 accepted 2007-10-02T08:08:11.870-04:00 class vulnerability contributors name Robert L. Hollis organization ThreatGuard, Inc. name Matthew Wojcik organization The MITRE Corporation name Todd Dolinsky organization Opsware, Inc.
description Unspecified vulnerability in swagentd in HP-UX B.11.00, B.11.04, and B.11.11 allows remote attackers to cause a denial of service (application crash) via unspecified vectors. family unix id oval:org.mitre.oval:def:312 status accepted submitted 2006-09-22T05:48:00.000-04:00 title HP-UX 11.04 swagentd Denial of Service version 39 accepted 2014-03-24T04:01:51.386-04:00 class vulnerability contributors name Robert L. Hollis organization ThreatGuard, Inc. name Matthew Wojcik organization The MITRE Corporation name Todd Dolinsky organization Opsware, Inc. name Sushant Kumar Singh organization Hewlett-Packard
description Unspecified vulnerability in swagentd in HP-UX B.11.00, B.11.04, and B.11.11 allows remote attackers to cause a denial of service (application crash) via unspecified vectors. family unix id oval:org.mitre.oval:def:616 status accepted submitted 2006-09-22T05:48:00.000-04:00 title HP-UX 11.11 swagentd Denial of Service version 42
References
- http://secunia.com/advisories/19373
- http://secunia.com/advisories/19395
- http://securitytracker.com/id?1015819
- http://support.avaya.com/elmodocs2/security/ASA-2006-076.htm
- http://www.osvdb.org/24097
- http://www.securityfocus.com/bid/17215
- http://www.vupen.com/english/advisories/2006/1089
- http://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00622788
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25421
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1031
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A312
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A616