PT-2007-2975 · Symantec · Symantec Veritas Volume Replicator (Vvr) For Unix+1
Published
2007-06-04
·
Updated
2017-07-29
·
CVE-2007-1593
CVSS v2.0
5.0
Medium
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
Symantec Veritas Volume Replicator (VVR) for Windows versions 3.1 through 4.3
Symantec Veritas Volume Replicator (VVR) for Unix versions 3.5 through 5.0
Description
The issue allows remote attackers to cause a denial of service, resulting in memory consumption and service crash. This is achieved by sending a crafted packet to the service port, specifically "8199/tcp", which triggers a request for more memory than is available. As a result, the service attempts to write to an invalid pointer.
Recommendations
For Symantec Veritas Volume Replicator (VVR) for Windows versions 3.1 through 4.3, consider restricting access to the service port "8199/tcp" to minimize the risk of exploitation.
For Symantec Veritas Volume Replicator (VVR) for Unix versions 3.5 through 5.0, consider restricting access to the service port "8199/tcp" to minimize the risk of exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Symantec Veritas Volume Replicator (Vvr) For Unix
Symantec Veritas Volume Replicator (Vvr) For Windows