Symantec Veritas Enterprise Administrator Service Multiple Buffer Overflow Vulnerabilities
BID:49014
Info
Symantec Veritas Enterprise Administrator Service Multiple Buffer Overflow Vulnerabilities
| Bugtraq ID: | 49014 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2011-0547 CVE-2011-0547 |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 15 2011 12:00AM |
| Updated: | Jan 25 2014 07:06AM |
| Credit: | Luigi Auriemma through TippingPoint�??s ZeroDay Initiative. |
| Vulnerable: |
Symantec Veritas Storage Foundation for Windows High Availability 5.1SP2 Symantec Veritas Storage Foundation for Windows High Availability 5.1SP1 Symantec Veritas Storage Foundation for Windows High Availability 5.1AP1 Symantec Veritas Storage Foundation for Windows High Availability 5.1 Symantec Veritas Storage Foundation for Windows High Availability 5.0RP2 Symantec Veritas Storage Foundation for Windows High Availability 5.0RP1a Symantec Veritas Storage Foundation for Windows High Availability 5.0RP1 Symantec Veritas Storage Foundation for Windows High Availability 5.0 Symantec Veritas Storage Foundation for Windows High Availability 4.3MP2 Symantec Veritas Storage Foundation for Windows 5.1SP2 Symantec Veritas Storage Foundation for Windows 5.1SP1 Symantec Veritas Storage Foundation for Windows 5.1 Symantec Veritas Storage Foundation for Windows 5.0RP2 Symantec Veritas Storage Foundation for Windows 5.0RP1 Symantec Veritas Storage Foundation for Windows 5.0 Symantec Veritas Storage Foundation for Sybase 5.1SP1 Symantec Veritas Storage Foundation for Sybase 5.1 Symantec Veritas Storage Foundation for Sybase 5.0MP3 Symantec Veritas Storage Foundation for Sybase 5.0MP2 Symantec Veritas Storage Foundation for Sybase 5.0MP1 Symantec Veritas Storage Foundation for Sybase 5.0.1 Symantec Veritas Storage Foundation for Sybase 5.0 Symantec Veritas Storage Foundation for Sybase 3.5 (HP-UX only) Symantec Veritas Storage Foundation for Real Application Cluster 5.1SP1 Symantec Veritas Storage Foundation for Real Application Cluster 5.1 Symantec Veritas Storage Foundation for Real Application Cluster 5.0MP3 Symantec Veritas Storage Foundation for Real Application Cluster 5.0MP2 Symantec Veritas Storage Foundation for Real Application Cluster 5.0MP1 Symantec Veritas Storage Foundation for Real Application Cluster 5.0.1 Symantec Veritas Storage Foundation for Real Application Cluster 5.0 Symantec Veritas Storage Foundation for Real Application Cluster 3.5 (HP-UX only) Symantec Veritas Storage Foundation for Oracle 5.1SP1 Symantec Veritas Storage Foundation for Oracle 5.1 Symantec Veritas Storage Foundation for Oracle 5.0MP3 Symantec Veritas Storage Foundation for Oracle 5.0MP2 Symantec Veritas Storage Foundation for Oracle 5.0MP1 Symantec Veritas Storage Foundation for Oracle 5.0.1 Symantec Veritas Storage Foundation for Oracle 5.0 Symantec Veritas Storage Foundation for Oracle 3.5 (HP-UX only) Symantec Veritas Storage Foundation for High Availability 5.1SP1 Symantec Veritas Storage Foundation for High Availability 5.1 Symantec Veritas Storage Foundation for High Availability 5.0MP3 Symantec Veritas Storage Foundation for High Availability 5.0MP2 Symantec Veritas Storage Foundation for High Availability 5.0MP1 Symantec Veritas Storage Foundation for High Availability 5.0.1 Symantec Veritas Storage Foundation for High Availability 5.0 Symantec Veritas Storage Foundation for High Availability 3.5 (HP-UX only) Symantec Veritas Storage Foundation for DB2 5.1SP1 Symantec Veritas Storage Foundation for DB2 5.1 Symantec Veritas Storage Foundation for DB2 5.0MP3 Symantec Veritas Storage Foundation for DB2 5.0MP2 Symantec Veritas Storage Foundation for DB2 5.0MP1 Symantec Veritas Storage Foundation for DB2 5.0.1 Symantec Veritas Storage Foundation for DB2 5.0 Symantec Veritas Storage Foundation for DB2 3.5 (HP-UX only) Symantec Veritas Storage Foundation Cluster File System for Oracle RAC 5.1SP1 RP2 Symantec Veritas Storage Foundation Cluster File System for Oracle RAC 5.1SP1 RP1 Symantec Veritas Storage Foundation Cluster File System for Oracle RAC 5.1 Symantec Veritas Storage Foundation Cluster File System for Oracle RAC 5.0RU4 Symantec Veritas Storage Foundation Cluster File System for Oracle RAC 5.0RU3 Symantec Veritas Storage Foundation Cluster File System for Oracle RAC 5.0MP4 Symantec Veritas Storage Foundation Cluster File System for Oracle RAC 5.0MP3 Symantec Veritas Storage Foundation Cluster File System for Oracle RAC 5.0MP2 Symantec Veritas Storage Foundation Cluster File System for Oracle RAC 5.0 (Linux) Symantec Veritas Storage Foundation Cluster File System 5.1SP1 Symantec Veritas Storage Foundation Cluster File System 5.1 Symantec Veritas Storage Foundation Cluster File System 5.0MP3 Symantec Veritas Storage Foundation Cluster File System 5.0MP2 Symantec Veritas Storage Foundation Cluster File System 5.0MP1 Symantec Veritas Storage Foundation Cluster File System 5.0.1 Symantec Veritas Storage Foundation Cluster File System 5.0 (Solaris) Symantec Veritas Storage Foundation Cluster File System 5.0 (Linux) Symantec Veritas Storage Foundation Cluster File System 5.0 (HP-UX) Symantec Veritas Storage Foundation Cluster File System 5.0 (AIX) Symantec Veritas Storage Foundation Cluster File System 4.1 Symantec Veritas Storage Foundation Cluster File System 4.0 Symantec Veritas Storage Foundation Cluster File System 3.5 (HP-UX) Symantec Veritas Storage Foundation 5.1SP1 Symantec Veritas Storage Foundation 5.1 Symantec Veritas Storage Foundation 5.0MP3 Symantec Veritas Storage Foundation 5.0MP2 Symantec Veritas Storage Foundation 5.0MP1 Symantec Veritas Storage Foundation 5.0.1 Symantec Veritas Storage Foundation 4.1 (HP-UX only) Symantec Veritas Storage Foundation 3.5 Symantec Veritas Enterprise Administrator 0 Symantec Veritas Dymanic Multi-Pathing 5.1 Symantec NetBackup PureDisk 6.6.1 Symantec NetBackup PureDisk 6.6.0 Symantec NetBackup PureDisk 6.6 Symantec NetBackup PureDisk 6.5 HP HP-UX B.11.31 HP HP-UX B.11.23 HP HP-UX B.11.11 |
| Not Vulnerable: | |
Discussion
Symantec Veritas Enterprise Administrator Service Multiple Buffer Overflow Vulnerabilities
The Symantec Veritas Enterprise Administrator service ('vxsvc.exe') is prone to multiple buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied data.
Attackers may leverage these issues to execute arbitrary code with administrative privileges on the affected system. Failed attacks will cause denial-of-service conditions.
The Symantec Veritas Enterprise Administrator service ('vxsvc.exe') is prone to multiple buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied data.
Attackers may leverage these issues to execute arbitrary code with administrative privileges on the affected system. Failed attacks will cause denial-of-service conditions.
Exploit / POC
Symantec Veritas Enterprise Administrator Service Multiple Buffer Overflow Vulnerabilities
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Symantec Veritas Enterprise Administrator Service Multiple Buffer Overflow Vulnerabilities
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
Symantec Veritas Enterprise Administrator Service Multiple Buffer Overflow Vulnerabilities
References:
References:
- Security Advisories Relating to Symantec Products - Symantec Veritas Enterprise (Symantec)
- Symantec Homepage (Symantec)
- Symantec Veritas Storage Foundation vxsvc.exe ASCII String Unpacking Remote Code (HP)
- Symantec Veritas Storage Foundation vxsvc.exe Unicode String Parsing Remote Code (HP)
- Symantec Veritas Storage Foundation vxsvc.exe Value Unpacking Integer Overflow R (HP)