CVE-2007-4347

Published: Nov 29, 2007Modified: Apr 23, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

Multiple integer overflows in the Job Engine (bengine.exe) service in Symantec Backup Exec for Windows Servers (BEWS) 11d build 11.0.7170 and 11.0.6.6235 allow remote attackers to cause a denial of service (CPU and memory consumption) via a crafted packet to port 5633/tcp, which triggers an infinite loop.

Affected (2)

Products: Symantec: Backupexec System Recovery

1 product

Backupexec System Recovery

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Symantec Backupexec System Recovery	Version 11.0.6235
Symantec Backupexec System Recovery	Version 11.0.7170

Related CWEs

References (18)

http://secunia.com/advisories/26975

Source: PSIRT-CNA@flexerasoftware.com

Patch

http://secunia.com/secunia_research/2007-74/advisory/

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://securityresponse.symantec.com/avcenter/security/Content/2007.11.27.html

Source: PSIRT-CNA@flexerasoftware.com

Patch

http://www.securityfocus.com/archive/1/484318/100/0/threaded

Source: PSIRT-CNA@flexerasoftware.com

http://www.securityfocus.com/archive/1/484333/100/0/threaded

Source: PSIRT-CNA@flexerasoftware.com

http://www.securityfocus.com/bid/26029

Source: PSIRT-CNA@flexerasoftware.com

Patch

http://www.securitytracker.com/id?1019001

Source: PSIRT-CNA@flexerasoftware.com

http://www.vupen.com/english/advisories/2007/4019

Source: PSIRT-CNA@flexerasoftware.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/38677

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/26975

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://secunia.com/secunia_research/2007-74/advisory/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securityresponse.symantec.com/avcenter/security/Content/2007.11.27.html

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.securityfocus.com/archive/1/484318/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/484333/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/26029

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.securitytracker.com/id?1019001

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/4019

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/38677

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.