PT-2007-2975 · Symantec · Symantec Veritas Volume Replicator (Vvr) For Unix+1
Publicado
2007-06-04
·
Atualizado
2017-07-29
·
CVE-2007-1593
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
Symantec Veritas Volume Replicator (VVR) for Windows versions 3.1 through 4.3
Symantec Veritas Volume Replicator (VVR) for Unix versions 3.5 through 5.0
Description
The issue allows remote attackers to cause a denial of service, resulting in memory consumption and service crash. This is achieved by sending a crafted packet to the service port, specifically "8199/tcp", which triggers a request for more memory than is available. As a result, the service attempts to write to an invalid pointer.
Recommendations
For Symantec Veritas Volume Replicator (VVR) for Windows versions 3.1 through 4.3, consider restricting access to the service port "8199/tcp" to minimize the risk of exploitation.
For Symantec Veritas Volume Replicator (VVR) for Unix versions 3.5 through 5.0, consider restricting access to the service port "8199/tcp" to minimize the risk of exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Symantec Veritas Volume Replicator (Vvr) For Unix
Symantec Veritas Volume Replicator (Vvr) For Windows