CVE-2008-3703: Improper Authentication

The management console in the Volume Manager Scheduler Service aka VxSchedService.exe in Symantec Veritas Storage Foundation for Windows SFW 5.0, 5.0 RP1a, and 5.1 accepts NULL NTLMSSP authentication, which allows remote attackers to execute arbitrary code via requests to the service socket that...

CVE-2007-4516

The Volume Manager Scheduler Service aka VxSchedService.exe in Symantec Veritas Storage Foundation 5.0 for Windows allows remote attackers to cause a denial of service daemon crash or hang via malformed packets...

Code injection

The Volume Manager Scheduler Service aka VxSchedService.exe in Symantec Veritas Storage Foundation 5.0 for Windows allows remote attackers to cause a denial of service daemon crash or hang via malformed packets...

CVE-2007-4516

Affected product: Symantec Veritas Storage Foundation 5.0 for Windows with the Scheduler Service (VxSchedService.exe). The vulnerability allows remote, unauthenticated attackers to crash or hang the daemon by sending malformed packets over TCP port 4888, leading to a DoS. The issue is tied to rem...

CVE-2007-4516: Improper Input Validation

The Volume Manager Scheduler Service aka VxSchedService.exe in Symantec Veritas Storage Foundation 5.0 for Windows allows remote attackers to cause a denial of service daemon crash or hang via malformed packets...

CVE-2007-2279: Undefined Security Weakness

The Scheduler Service VxSchedService.exe in Symantec Storage Foundation for Windows 5.0 allows remote attackers to bypass authentication and execute arbitrary code via certain requests to the service socket that create 1 PreScript or 2 PostScript registry values under...