CVEvulnerability
CVE-2007-2279
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-06-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The Scheduler Service (VxSchedService.exe) in Symantec Storage Foundation for Windows 5.0 allows remote attackers to bypass authentication and execute arbitrary code via certain requests to the service socket that create (1) PreScript or (2) PostScript registry values under Veritas\VxSvc\CurrentVersion\Schedules specifying future command execution.
Affected configurations
• symantec veritas storage foundation 5.0
Related
Weakness · not in database (1)
References
- http://osvdb.org/36104 osvdb.org
- http://secunia.com/advisories/25537 Vendor Advisory
- http://seer.entsupport.symantec.com/docs/288627.htm seer.entsupport.symantec.com
- http://www.securityfocus.com/archive/1/470562/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/24194 www.securityfocus.com
- http://www.securitytracker.com/id?1018188 www.securitytracker.com
- http://www.symantec.com/avcenter/security/Content/2007.06.01.html Patch, Vendor Advisory
- http://www.vupen.com/english/advisories/2007/2035 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34680 exchange.xforce.ibmcloud.com
- http://osvdb.org/36104 osvdb.org
- http://secunia.com/advisories/25537 Vendor Advisory
- http://seer.entsupport.symantec.com/docs/288627.htm seer.entsupport.symantec.com
- http://www.securityfocus.com/archive/1/470562/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/24194 www.securityfocus.com
- http://www.securitytracker.com/id?1018188 www.securitytracker.com
- http://www.symantec.com/avcenter/security/Content/2007.06.01.html Patch, Vendor Advisory
- http://www.vupen.com/english/advisories/2007/2035 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34680 exchange.xforce.ibmcloud.com