HP-UX Swagentd Remote Denial Of Service Vulnerability

Bugtraq ID:	17215
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2006-1389
Remote:	Yes
Local:	No
Published:	Mar 23 2006 12:00AM
Updated:	Jun 27 2007 08:28PM
Credit:	This issue was disclosed by the vendor.
Vulnerable:	HP HP-UX B.11.11 HP HP-UX B.11.04 HP HP-UX B.11.00 Avaya Predictive Dialing System (PDS) 12.0
Not Vulnerable:

HP-UX Swagentd Remote Denial Of Service Vulnerability

A remote denial-of-service vulnerability has been reported in the HP-UX 'swagentd' daemon.

A remote unauthenticated user may cause the swagentd server daemon to become unresponsive.

The precise technical details of this vulnerability are currently unknown. This BID will be updated as further information becomes available.

HP-UX Swagentd Remote Denial Of Service Vulnerability

An exploit is not required.

HP-UX Swagentd Remote Denial Of Service Vulnerability

Solution:
The vendor has released an advisory along with fixes to address this issue.

Please see the referenced advisories for more information.

HP-UX Swagentd Remote Denial Of Service Vulnerability

References:

• ASA-2006-076 - HP-UX Running swagentd Remote Denial of Service (DoS) (HPSBUX0210 (Avaya)
  
• HP Support (Hewlett Packard)
  
• HPSBUX02105 SSRT061134 rev.2 - HP-UX Running swagentd Remote Denial of Service ( (HP)