The following security advisory is sent to the securiteam mailing list, and can
be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion
The SecuriTeam alerts list - Free, Accurate, Independent.
Get your security news from a reliable source.
http://www.securiteam.com/mailinglist.html
- - - - - - - - -
Symantec Veritas Storage Foundation Scheduler Service DoS Vulnerability
------------------------------------------------------------------------
SUMMARY
The
<http://www.symantec.com/enterprise/products/overview.jsp?pcid=1020&pvid=203_1>
Veritas Storage Foundation is based on the Veritas File System and Veritas
Volume Manager products. It allows virtualization of storage over a variety of
platforms. It contains a remote administration application to configure and
monitor the elements of the storage network. Remote exploitation of a denial of
service vulnerability in Symantec Corp.'s Veritas Storage Foundation scheduler
service could allow an unauthenticated attacker to crash the service.
DETAILS
Vulnerable Systems:
* Veritas Storage Foundation for Windows version 5.0 (with
VxSchedService.exe version 5.0.9.298)
When the Veritas Scheduler service (VxSchedService.exe) encounters certain
packets, an invalid memory access occurs causing the service to crash.
Analysis:
Exploitation of this vulnerability allows remote attackers to cause the
affected service to terminate. In order to exploit this vulnerability, an
attacker must be able to establish a TCP session with the service on port
4888. No authentication is required to reach the vulnerable code.
Vendor response:
Symantec has addressed this vulnerability by releasing an update for
Veritas Storage Foundation. More information is available in Symantec's
advisory at the following URL:
<http://www.symantec.com/avcenter/security/Content/2008.02.20.html>
http://www.symantec.com/avcenter/security/Content/2008.02.20.html
CVE Information:
<http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4516>
CVE-2007-4516
Disclosure Timeline:
08/15/2007 - Initial vendor notification
08/15/2007 - Initial vendor response
02/20/2008 - Coordinated public disclosure
ADDITIONAL INFORMATION
The information has been provided by
<mailto:idlabs-advisories@idefense.com> iDefense Labs Security Advisories.
The original article can be found at:
<http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=665>
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=665
========================================
This bulletin is sent to members of the SecuriTeam mailing list.
To unsubscribe from the list, send mail with an empty subject line and body to:
list-unsubscribe@securiteam.com
In order to subscribe to the mailing list, simply forward this email to:
list-subscribe@securiteam.com
====================
====================
DISCLAIMER:
The information in this bulletin is provided "AS IS" without warranty of any
kind.
In no event shall we be liable for any damages whatsoever including direct,
indirect, incidental, consequential, loss of business profits or special
damages.
