CVE-2009-3027

CVE-2009-3027 affects numerous Symantec/Veritas products' VRTSweb component. The flaw is in VRTSweb.exe, where the Web Server on TCP/14300 fails to properly validate an authentication request, allowing a remote attacker to trigger unpacking of a WAR archive and execute arbitrary code. The impact ...