29050

1019459

20080220 ZDI-08-007: Symantec VERITAS Storage Foundation Administrator Service Heap Overflow Vulnerability

25778

http://www.symantec.com/avcenter/security/Content/2008.02.20a.html

http://www.zerodayinitiative.com/advisories/ZDI-08-007.html

Veritas Storage Foundation, a storage management solution from Symantec is installed on the remote host.

The installed version is reportedly affected by a denial of service vulnerability. By sending specially crafted IP packets to TCP port 4888, an unauthenticated attacker may be able to cause a denial of service condition and crash the scheduler service.

In addition the Administration service may also be affected by a heap overflow vulnerability.

CVE-2008-0638

high

Tenable Plugins

low