Symantec VERITAS Storage Foundation multiple security vulnerabilities

DoS via resource consumption against TCP/8199 administrative service. VxSchedService.exe TCP/4888 scheduler service authentication bypass and code execution...

Authentication flaw

The Scheduler Service VxSchedService.exe in Symantec Storage Foundation for Windows 5.0 allows remote attackers to bypass authentication and execute arbitrary code via certain requests to the service socket that create 1 PreScript or 2 PostScript registry values under...

CVE-2007-2279

The Scheduler Service VxSchedService.exe in Symantec Storage Foundation for Windows 5.0 allows remote attackers to bypass authentication and execute arbitrary code via certain requests to the service socket that create 1 PreScript or 2 PostScript registry values under...

CVE-2007-2279

The Scheduler Service VxSchedService.exe in Symantec Storage Foundation for Windows 5.0 allows remote attackers to bypass authentication and execute arbitrary code via certain requests to the service socket that create 1 PreScript or 2 PostScript registry values under...

CVE-2007-2279

The CVE-2007-2279 issue affects Symantec Veritas Storage Foundation for Windows Volume Manager Scheduler Service (VxSchedService.exe) in v5.0 (including 5.0 RP1a and 5.1). The vulnerability enables an unauthenticated remote attacker to bypass authentication and execute arbitrary code by sending c...

Symantec Veritas Storage Foundation Scheduler Service (VxSchedService.exe) Remote Code Execution

The remote host is running a version of Symantec Storage Foundation for Windows that is vulnerable to a remote scheduler service access. An attacker may exploit this flaw to modify or create scheduled commands and gain a full access to the system. To exploit this flaw, an attacker would need to...

Symantec Storage Foundation VxSchedService.EXE调度服务验证绕过漏洞

Symantec Storage Foundation是一款应用广泛的存储管理平台。 Symantec Storage Foundation包含的调度服务存在验证绕过和任意代码执行问题，远程攻击者可以利用漏洞以进程权限执行任意指令，控制目标系统。 攻击者可以直接连接调度服务套接字绕过管理控制台的内置验证程序，以应用程序进程权限执行任意指令。目前没有详细漏洞细节提供。 Symantec Foundation for Windows 5.0 可参考安全公告获得补丁信息：...

CVE-2007-1593: Undefined Security Weakness

The administrative service in Symantec Veritas Volume Replicator VVR for Windows 3.1 through 4.3, and VVR for Unix 3.5 through 5.0, in Symantec Storage Foundation products allows remote attackers to cause a denial of service memory consumption and service crash via a crafted packet to the service...

CVE-2007-2279: Undefined Security Weakness

The Scheduler Service VxSchedService.exe in Symantec Storage Foundation for Windows 5.0 allows remote attackers to bypass authentication and execute arbitrary code via certain requests to the service socket that create 1 PreScript or 2 PostScript registry values under...

iDefense Security Advisory 06.01.07: Symantec VERITAS Storage Foundation Administration Service DoS Vulnerability

Symantec VERITAS Storage Foundation Administration Service DoS Vulnerability iDefense Security Advisory 06.01.07 http://labs.idefense.com/intelligence/vulnerabilities/ June 01, 2007 I. BACKGROUND The VERITAS Storage Foundation is made up of the Veritas File System, Veritas Volume Replicator VVR...

[Full-disclosure] DMA[2005-1112a] - 'Veritas Storage Foundation VCSI18N_LANG buffer overflow'

DMA2005-1112a - 'Veritas Storage Foundation VCSI18NLANG buffer overflow' Author: Kevin Finisterre Vendor: http://www.Veritas.com Product: 'Veritas Cluster Server for UNIX' References: http://www.digitalmunition.com/DMA2005-1112a.txt http://www.symantec.com/avcenter/security/Content/2005.11.08a.ht...

SF_multi.pl.txt

!/usr/bin/perl -w Veritas Storage Foundation 4.0 http://www.digitalmunition.com kf kflistsatdigitalmunitiondotcom - 08/19/2005 This bug has not been patched as of: Q14438H.sf.4.0.00.0.rhel3i686.tar.gz Make sure you don't get your sploits from some Frenchie at FR-SIRT go to milw0rm instead. $retva...

Veritas Storage Foundation 4.0 - VCSI18N_LANG Local Overflow

Veritas Storage Foundation 4.0 - VCSI18NLANG Local Overflow !/usr/bin/perl -w Veritas Storage Foundation 4.0 http://www.digitalmunition.com kf kflistsatdigitalmunitiondotcom - 08/19/2005 This bug has not been patched as of: Q14438H.sf.4.0.00.0.rhel3i686.tar.gz Make sure you don't get your sploits...

Veritas Storage Foundation 4.0 - VCSI18N_LANG Local Overflow

!/usr/bin/perl -w Veritas Storage Foundation 4.0 http://www.digitalmunition.com kf kflistsatdigitalmunitiondotcom - 08/19/2005 This bug has not been patched as of: Q14438H.sf.4.0.00.0.rhel3i686.tar.gz Make sure you don't get your sploits from some Frenchie at FR-SIRT go to milw0rm instead. $retva...

Veritas Storage Foundation 4.0 VCSI18N_LANG Local Overflow Exploit

Exploit for linux platform in category local exploits ================================================================== Veritas Storage Foundation 4.0 VCSI18NLANG Local Overflow Exploit ================================================================== !/usr/bin/perl -w Veritas Storage Foundatio...

Veritas Storage Foundation 4.0 VCSI18N_LANG Local Overflow Exploit

No description provided by source. !/usr/bin/perl -w Veritas Storage Foundation 4.0 http://www.digitalmunition.com kf kflistsatdigitalmunitiondotcom - 08/19/2005 This bug has not been patched as of: Q14438H.sf.4.0.00.0.rhel3i686.tar.gz Make sure you don't get your sploits from some Frenchie at...

[SA17502] VERITAS Cluster Server for UNIX Buffer Overflow Vulnerability

TITLE: VERITAS Cluster Server for UNIX Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA17502 VERIFY ADVISORY: http://secunia.com/advisories/17502/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: VERITAS Storage Foundation Cluster File System 4.x...