CVE-2007-1593

The administrative service in Symantec Veritas Volume Replicator (VVR) for Windows 3.1 through 4.3, and VVR for Unix 3.5 through 5.0, in Symantec Storage Foundation products allows remote attackers to cause a denial of service (memory consumption and service crash) via a crafted packet to the service port (8199/tcp) that triggers a request for more memory than available, which causes the service to write to an invalid pointer.

Link	Resource
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=539	Patch Vendor Advisory
http://www.symantec.com/avcenter/security/Content/2007.06.01a.html	Patch
http://www.securityfocus.com/bid/24160
http://cirt.dk/advisories/cirt-53-advisory.txt
http://www.securitytracker.com/id?1018184
http://secunia.com/advisories/25516	Vendor Advisory
http://www.vupen.com/english/advisories/2007/2036	Vendor Advisory
http://osvdb.org/36102
https://exchange.xforce.ibmcloud.com/vulnerabilities/34676

Configuration 1

cpe:2.3:a:symantec:veritas_volume_replicator:4.2:rp2:windows:*:*:*:*:* cpe:2.3:a:symantec:veritas_volume_replicator:3.5:*:unix:*:*:*:*:* cpe:2.3:a:symantec:veritas_volume_replicator:5.0:*:unix:*:*:*:*:* cpe:2.3:a:symantec:veritas_volume_replicator:4.3:mp3:windows:*:*:*:*:* cpe:2.3:a:symantec:veritas_volume_replicator:3.1:*:windows:*:*:*:*:* cpe:2.3:a:symantec:veritas_volume_replicator:4.0:*:unix:*:*:*:*:* cpe:2.3:a:symantec:veritas_volume_replicator:4.3:*:windows:*:*:*:*:* cpe:2.3:a:symantec:veritas_volume_replicator:4.1:*:windows:*:*:*:*:* cpe:2.3:a:symantec:veritas_volume_replicator:4.1:rp1:windows:*:*:*:*:* cpe:2.3:a:symantec:veritas_volume_replicator:4.2:rp1:windows:*:*:*:*:* cpe:2.3:a:symantec:veritas_volume_replicator:4.1:*:unix:*:*:*:*:* cpe:2.3:a:symantec:veritas_volume_replicator:4.2:*:windows:*:*:*:*:*

---

Published : 2007-06-04 04:30

Updated : 2017-07-29 01:30

---

NVD link : CVE-2007-1593

Mitre link : CVE-2007-1593

No products.

CWE-399