KLA10380 ACE vulnerability in Veritas Storage

A buffer overflow was found in Veritas Storage. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely at points related to DCOM server components.

Original advisories

Symantec bulletin

Related products

VERITAS-Storage-Exec

VERITAS-Storagecentral

CVE list

CVE-2005-2996 critical

Solution

Update to latest version

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• Symantec Veritas Storage Exec 5.3 rev. 2190RSymantec Veritas StorageCentral 5.2 rev. 322