Design/Logic Flaw

The server components in Objectivity/DB 10.0 do not require authentication for administrative commands, which allows remote attackers to modify data, obtain sensitive information, or cause a denial of service by sending requests over TCP to 1 the Lock Server or 2 the Advanced Multithreaded Server...

CVE-2011-0489

CVE-2011-0489 affects Objectivity/DB 10.0 server components, where authentication is not required for administrative commands. This allows remote attackers to modify data, retrieve sensitive information, or cause a denial of service by sending commands over TCP to the Lock Server or the Advanced ...

CVE-2005-2996

Multiple heap-based and stack-based buffer overflows in certain DCOM server components in VERITAS Storage Exec Storage Exec 5.3 before Hotfix 9 and StorageCentral 5.2 before Hot Fix 2 allow remote attackers to execute arbitrary code via certain ActiveX controls...