Veritas Storage Foundation Multiple Service Remote DoS (SYM08-004)

Veritas Storage Foundation, a storage management solution from Symantec is installed on the remote host. The installed version is reportedly affected by a denial of service vulnerability. By sending specially crafted IP packets to TCP port 4888, an unauthenticated attacker may be able to cause a...

Veritas Storage Foundation Administrator service buffer overflow

Added: 03/03/2008 CVE: CVE-2008-0638 BID: 25778 OSVDB: 41978 Background Veritas Storage Foundation is an online storage management solution. An Administrator service, implemented by vxsvc.exe , listens on port 3207 by default. Problem A buffer overflow vulnerability in the Administrator service...

Veritas Storage Foundation Administrator service buffer overflow

Added: 03/03/2008 CVE: CVE-2008-0638 BID: 25778 OSVDB: 41978 Background Veritas Storage Foundation is an online storage management solution. An Administrator service, implemented by vxsvc.exe, listens on port 3207 by default. Problem A buffer overflow vulnerability in the Administrator service...

Veritas Storage Foundation Administrator service buffer overflow

Added: 03/03/2008 CVE: CVE-2008-0638 BID: 25778 OSVDB: 41978 Background Veritas Storage Foundation is an online storage management solution. An Administrator service, implemented by vxsvc.exe , listens on port 3207 by default. Problem A buffer overflow vulnerability in the Administrator service...

Veritas Storage Foundation Administrator service buffer overflow

Added: 03/03/2008 CVE: CVE-2008-0638 BID: 25778 OSVDB: 41978 Background Veritas Storage Foundation is an online storage management solution. An Administrator service, implemented by vxsvc.exe, listens on port 3207 by default. Problem A buffer overflow vulnerability in the Administrator service...

Symantec Veritas Storage Foundation VEA组件堆溢出漏洞

BUGTRAQ ID: 25778 CVECAN ID: CVE-2008-0638 Veritas Storage Foundation是用于管理Veritas产品存储的解决方案。 Veritas Storage Foundation在服务组件实现上存在漏洞，远程攻击者可能利用此漏洞控制服务器。 Veritas Storage Foundation的Veritas企业管理员（VEA）组件中的Administrator服务（vxsvc.exe，默认监听于UDP...

Symantec Veritas Storage Foundation Scheduler服务远程拒绝服务漏洞

BUGTRAQ ID: 27440 CVECAN ID: CVE-2007-4516 Veritas Storage Foundation是用于管理Veritas产品存储的解决方案。 Veritas Storage Foundation的Veritas Scheduler服务处理畸形用户请求时存在漏洞，远程攻击者可能利用此漏洞导致服务不可用。 如果Veritas Scheduler服务（VxSchedService.exe）接收到了畸形报文，就会触发无效的内存访问，导致该服务崩溃。攻击者无需认证便可以利用这个漏洞，但必须要在服务的4888端口创建TCP会话。 Symantec Verit...

iDefense Security Advisory 02.20.08: Symantec Veritas Storage Foundation Scheduler Service DoS Vulnerability

iDefense Security Advisory 02.20.08 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 20, 2008 I. BACKGROUND The Veritas Storage Foundation is based on the Veritas File System and Veritas Volume Manager products. It allows virtualization of storage over a variety of platforms. It contain...

ZDI-08-007: Symantec VERITAS Storage Foundation Administrator Service Heap Overflow Vulnerability

ZDI-08-007: Symantec VERITAS Storage Foundation Administrator Service Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-007.html February 20, 2008 -- CVE ID: CVE-2008-0638 -- Affected Vendor: Symantec -- Affected Products: Veritas Storage Foundation 5.0 --...

CVE-2008-0638

Heap-based buffer overflow in the Veritas Enterprise Administrator VEA service aka vxsvc.exe in Symantec Veritas Storage Foundation 5.0 allows remote attackers to execute arbitrary code via a packet with a crafted value of a certain size field, which is not checked for consistency with the actual...

Code injection

The Volume Manager Scheduler Service aka VxSchedService.exe in Symantec Veritas Storage Foundation 5.0 for Windows allows remote attackers to cause a denial of service daemon crash or hang via malformed packets...

CVE-2007-4516

The Volume Manager Scheduler Service aka VxSchedService.exe in Symantec Veritas Storage Foundation 5.0 for Windows allows remote attackers to cause a denial of service daemon crash or hang via malformed packets...

Heap overflow

Heap-based buffer overflow in the Veritas Enterprise Administrator VEA service aka vxsvc.exe in Symantec Veritas Storage Foundation 5.0 allows remote attackers to execute arbitrary code via a packet with a crafted value of a certain size field, which is not checked for consistency with the actual...

CVE-2008-0638

CVE-2008-0638 affects Symantec VERITAS Storage Foundation 5.0. The Administrator service vxsvc.exe (UDP 3207 by default) is vulnerable to a heap-based buffer overflow: it trusts a user-provided size value and copies into a static heap buffer, enabling remote code execution with SYSTEM privileges ...

CVE-2007-4516

The Volume Manager Scheduler Service aka VxSchedService.exe in Symantec Veritas Storage Foundation 5.0 for Windows allows remote attackers to cause a denial of service daemon crash or hang via malformed packets...

CVE-2008-0638

Heap-based buffer overflow in the Veritas Enterprise Administrator VEA service aka vxsvc.exe in Symantec Veritas Storage Foundation 5.0 allows remote attackers to execute arbitrary code via a packet with a crafted value of a certain size field, which is not checked for consistency with the actual...

CVE-2007-4516

Affected product: Symantec Veritas Storage Foundation 5.0 for Windows with the Scheduler Service (VxSchedService.exe). The vulnerability allows remote, unauthenticated attackers to crash or hang the daemon by sending malformed packets over TCP port 4888, leading to a DoS. The issue is tied to rem...

CVE-2008-0638: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the Veritas Enterprise Administrator VEA service aka vxsvc.exe in Symantec Veritas Storage Foundation 5.0 allows remote attackers to execute arbitrary code via a packet with a crafted value of a certain size field, which is not checked for consistency with the actual...

CVE-2007-4516: Improper Input Validation

The Volume Manager Scheduler Service aka VxSchedService.exe in Symantec Veritas Storage Foundation 5.0 for Windows allows remote attackers to cause a denial of service daemon crash or hang via malformed packets...

Symantec VERITAS Storage Foundation Administrator Service Heap Overflow Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Symantec VERITAS Storage Foundation. Authentication is not required to exploit this vulnerability. The specific flaw resides in the Administrator service, vxsvc.exe, which listens by default on UDP port...