CVE-2021-44677

An issue 1 of 6 was discovered in Veritas Enterprise Vault through 14.1.2. On start-up, the Enterprise Vault application starts several services that listen on random .NET Remoting TCP ports for possible commands from client applications. These TCP services can be exploited due to deserialization...

CVE-2021-44677

creationtimestamp| type| source ---|---|--- 2021-12-07 00:22:37+00:00| seen| https://t.me/cibsecurity/33416...

CVE-2021-44677

CVE-2021-44677 relates to Veritas Enterprise Vault (14.1.2 and earlier) startup behavior that launches multiple services listening on random .NET Remoting TCP ports. The linked ZDI advisory (ZDI-21-1592) documents a deserialization flaw in EVExchangeWebServicesProxy.exe that allows unauthenticate...