CVE-2007-4516

Published: Feb 21, 2008Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The Volume Manager Scheduler Service (aka VxSchedService.exe) in Symantec Veritas Storage Foundation 5.0 for Windows allows remote attackers to cause a denial of service (daemon crash or hang) via malformed packets.

Affected (2)

Products: Symantec Veritas: Storage Foundation

Symantec Veritas

1 product

Storage Foundation

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Symantec Veritas Storage Foundation	Version 5.0
Symantec Veritas Storage Foundation	Version 5.0 32bit

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (12)

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=665

Source: cve@mitre.org

http://secunia.com/advisories/29033

Source: cve@mitre.org

http://securitytracker.com/id?1019458

Source: cve@mitre.org

http://www.securityfocus.com/bid/27440

Source: cve@mitre.org

http://www.symantec.com/avcenter/security/Content/2008.02.20.html

Source: cve@mitre.org

Patch

http://www.vupen.com/english/advisories/2008/0624

Source: cve@mitre.org

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=665