CVE-2007-3509

2007-07-1201:30:00

[email protected]

web.nvd.nist.gov

cve-2007-3509

symantec backup exec

buffer overflow

rpc subsystem

denial of service

arbitrary code execution

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.1 High

AI Score

Confidence

High

0.096 Low

EPSS

Percentile

94.8%

JSON

Heap-based buffer overflow in the RPC subsystem in Symantec Backup Exec for Windows Servers 10.0, 10d, and 11d allows remote attackers to cause a denial of service (process exit) and possibly execute arbitrary code via crafted ncacn_ip_tcp requests.

Affected configurations

NVD

Node

symantecveritas_backup_execMatch10.0

symantecveritas_backup_execMatch10d

symantecveritas_backup_execMatch11d

CPENameOperatorVersion
symantec:veritas_backup_execsymantec veritas backup execeq10.0
symantec:veritas_backup_execsymantec veritas backup execeq10d
symantec:veritas_backup_execsymantec veritas backup execeq11d

CPE	Name	Operator	Version
symantec:veritas_backup_exec	symantec veritas backup exec	eq	10.0
symantec:veritas_backup_exec	symantec veritas backup exec	eq	10d
symantec:veritas_backup_exec	symantec veritas backup exec	eq	11d