CVEvulnerability
CVE-2008-3703
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-08-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-287
Description
The management console in the Volume Manager Scheduler Service (aka VxSchedService.exe) in Symantec Veritas Storage Foundation for Windows (SFW) 5.0, 5.0 RP1a, and 5.1 accepts NULL NTLMSSP authentication, which allows remote attackers to execute arbitrary code via requests to the service socket that create "snapshots schedules" registry values specifying future command execution. NOTE: this issue exists because of an incomplete fix for CVE-2007-2279.
Affected configurations
• symantec veritas storage foundation 5.0
• symantec veritas storage foundation 5.1
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://secunia.com/advisories/31486 Vendor Advisory
- http://securityreason.com/securityalert/4161 securityreason.com
- http://securitytracker.com/id?1020699 securitytracker.com
- http://seer.entsupport.symantec.com/docs/306386.htm Patch
- http://www.securityfocus.com/archive/1/495481 www.securityfocus.com
- http://www.securityfocus.com/archive/1/495487/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/30596 www.securityfocus.com
- http://www.symantec.com/avcenter/security/Content/2008.08.14a.html www.symantec.com
- http://www.vupen.com/english/advisories/2008/2395 www.vupen.com
- http://www.zerodayinitiative.com/advisories/ZDI-08-053/ www.zerodayinitiative.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44466 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/31486 Vendor Advisory
- http://securityreason.com/securityalert/4161 securityreason.com
- http://securitytracker.com/id?1020699 securitytracker.com
- http://seer.entsupport.symantec.com/docs/306386.htm Patch
- http://www.securityfocus.com/archive/1/495481 www.securityfocus.com
- http://www.securityfocus.com/archive/1/495487/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/30596 www.securityfocus.com
- http://www.symantec.com/avcenter/security/Content/2008.08.14a.html www.symantec.com
- http://www.vupen.com/english/advisories/2008/2395 www.vupen.com
- http://www.zerodayinitiative.com/advisories/ZDI-08-053/ www.zerodayinitiative.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44466 exchange.xforce.ibmcloud.com