CVE-2007-2279 The Scheduler Service (VxSchedService.exe) in Symantec Storage Foundation for Windows 5.0 allows remote attackers to bypass authentication and execute arbitrary code via certain requests to the servic...
HighCVSS 9.3
EPSS 5.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Scheduler Service (VxSchedService.exe) in Symantec Storage Foundation for Windows 5.0 allows remote attackers to bypass authentication and execute arbitrary code via certain requests to the service socket that create (1) PreScript or (2) PostScript registry values under Veritas\VxSvc\CurrentVersion\Schedules specifying future command execution.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec veritas storage foundation | = 5.0 | No fix listed |
References
- 36104 vdb-entry
- 25537 third-party-advisory vendor-advisory
- seer.entsupport.symantec.com
- 20070605 TPTI-07-08: Symantec Veritas Storage Foundation Scheduler Service Authentication Bypass Vulnerability mailing-list
- 24194 vdb-entry
- 1018188 vdb-entry
- www.symantec.com patch vendor-advisory
- ADV-2007-2035 vdb-entry vendor-advisory
- symantec-scheduler-security-bypass(34680) vdb-entry