CVE-2008-3703

The management console in the Volume Manager Scheduler Service (aka VxSchedService.exe) in Symantec Veritas Storage Foundation for Windows (SFW) 5.0, 5.0 RP1a, and 5.1 accepts NULL NTLMSSP authentication, which allows remote attackers to execute arbitrary code via requests to the service socket that create "snapshots schedules" registry values specifying future command execution. NOTE: this issue exists because of an incomplete fix for CVE-2007-2279.

Link	Resource
http://www.securityfocus.com/archive/1/495481
http://www.zerodayinitiative.com/advisories/ZDI-08-053/
http://seer.entsupport.symantec.com/docs/306386.htm	Patch
http://www.symantec.com/avcenter/security/Content/2008.08.14a.html
http://www.securityfocus.com/bid/30596
http://securitytracker.com/id?1020699
http://secunia.com/advisories/31486	Vendor Advisory
http://securityreason.com/securityalert/4161
http://www.vupen.com/english/advisories/2008/2395
https://exchange.xforce.ibmcloud.com/vulnerabilities/44466
http://www.securityfocus.com/archive/1/495487/100/0/threaded

Configuration 1

cpe:2.3:a:symantec:veritas_storage_foundation:5.1:*:windows:*:*:*:*:* cpe:2.3:a:symantec:veritas_storage_foundation:5.0:rp1a:windows:*:*:*:*:* cpe:2.3:a:symantec:veritas_storage_foundation:5.0:*:windows:*:*:*:*:*

---

Published : 2008-08-18 05:41

Updated : 2018-10-11 08:49

---

NVD link : CVE-2008-3703

Mitre link : CVE-2008-3703

No products.

CWE-287