WHERE:
From local network
SOFTWARE:
Symantec Veritas Storage Foundation 5.x
link://[click]
DESCRIPTION:
A vulnerability has been reported in Symantec Veritas Storage
Foundation, which can be exploited by malicious people to cause a DoS
(Denial of Service) or compromise a vulnerable system.
The vulnerability is caused due to an input validation error in the
Administrator Service and can be exploited to cause a heap-based
buffer overflow via a specially crafted packet sent to default port
3207/UDP.
Successful exploitation may allow execution of arbitrary code.
The vulnerability affects version 5.0 on Windows and UNIX/Linux.
SOLUTION:
Apply patches.
Version 5.0 on 32-bit Windows 2000/2003:
link://[click]
Version 5.0 on 64-bit Windows 2000/2003:
link://[click]
Version 5.0 on Solaris/HP-UX/Linux/AIX:
link://[click]
PROVIDED AND/OR DISCOVERED BY:
Discovered by Sebastian Apelt and reported via ZDI.
