TUCoPS :: HP/UX :: bx1120.htm

TUCoPS :: HP/UX :: bx1120.htm
Hewlett-Packard HP-UX swagentd Buffer Overflow Vulnerability
ZDI-07-079: Hewlett-Packard HP-UX swagentd Buffer Overflow Vulnerability ZDI-07-079: Hewlett-Packard HP-UX swagentd Buffer Overflow Vulnerability
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