Description
The administrative service in Symantec Veritas Volume Replicator (VVR) for Windows 3.1 through 4.3, and VVR for Unix 3.5 through 5.0, in Symantec Storage Foundation products allows remote attackers to cause a denial of service (memory consumption and service crash) via a crafted packet to the service port (8199/tcp) that triggers a request for more memory than available, which causes the service to write to an invalid pointer.
References
- http://cirt.dk/advisories/cirt-53-advisory.txt
- symantec-vvr-dos(34676) vdb-entry
- 36102 vdb-entry
- 25516 third-party-advisory
- http://www.symantec.com/avcenter/security/Content/2007.06.01a.html
- 1018184 vdb-entry
- ADV-2007-2036 vdb-entry
- 24160 vdb-entry
- 20070601 Symantec VERITAS Storage Foundation Administration Service DoS Vulnerability third-party-advisory