PT-2007-5532 · Symantec · Symantec Backup Exec

Published 2007-11-29 · Updated 2018-10-15 · CVE-2007-4347

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Symantec Backup Exec for Windows Servers versions 11.0.6.6235 through 11.0.7170

Description The issue is related to multiple integer overflows in the Job Engine service, which can be exploited by remote attackers. This is done by sending a crafted packet to port 5633/tcp, triggering an infinite loop that leads to a denial of service due to CPU and memory consumption.

Recommendations For Symantec Backup Exec for Windows Servers versions 11.0.6.6235 through 11.0.7170, consider restricting access to port 5633/tcp to minimize the risk of exploitation. As a temporary workaround, limiting the resources available to the Job Engine service may help mitigate the impact of the denial of service. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2007-4347

Affected Products

Symantec Backup Exec

References · 10

• http://securityfocus.com/bid/26029 · Patch
• http://securityresponse.symantec.com/avcenter/security/Content/2007.11.27.html · Patch
• http://secunia.com/secunia_research/2007-74/advisory · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-4347 · Security Note
• http://secunia.com/advisories/26975 · Patch
• http://securityfocus.com/archive/1/484318/100/0/threaded · Note
• http://securitytracker.com/id?1019001 · Note
• http://securityfocus.com/archive/1/484333/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38677 · Note
• http://vupen.com/english/advisories/2007/4019 · Note