« Volver al listado

CVE-2007-1593

Estado: ModificadaMedia (5)—

The administrative service in Symantec Veritas Volume Replicator (VVR) for Windows 3.1 through 4.3, and VVR for Unix 3.5 through 5.0, in Symantec Storage Foundation products allows remote attackers to cause a denial of service (memory consumption and service crash) via a crafted packet to the service port (8199/tcp) that triggers a request for more memory than available, which causes the service to write to an invalid pointer.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Symantec — Veritas Volume Replicator

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-1593",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-06-04T16:30:00.000",
  "references": [
    {
      "url": "http://cirt.dk/advisories/cirt-53-advisory.txt",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=539",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/36102",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/25516",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/24160",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securitytracker.com/id?1018184",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.symantec.com/avcenter/security/Content/2007.06.01a.html",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2007/2036",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34676",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://cirt.dk/advisories/cirt-53-advisory.txt",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=539",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/36102",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/25516",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/24160",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1018184",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.symantec.com/avcenter/security/Content/2007.06.01a.html",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2007/2036",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34676",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-399"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The administrative service in Symantec Veritas Volume Replicator (VVR) for Windows 3.1 through 4.3, and VVR for Unix 3.5 through 5.0, in Symantec Storage Foundation products allows remote attackers to cause a denial of service (memory consumption and service crash) via a crafted packet to the service port (8199/tcp) that triggers a request for more memory than available, which causes the service to write to an invalid pointer."
    },
    {
      "lang": "es",
      "value": "El servicio administrativo de Symantec Veritas Volume Replicator (VVR) para Windows versiones 3.1 hasta 4.3, y VVR para Unix versiones 3.5 hasta 5.0, en productos de Symantec Storage Foundation, permite a atacantes remotos causar una denegación de servicio (consumo de memoria y bloqueo del servicio) por medio de un paquete diseñado hacia el puerto de servicio (8199/tcp) que desencadena una petición de más memoria de la disponible, lo que causa que el servicio escriba en un puntero no válido."
    }
  ],
  "lastModified": "2026-06-16T22:37:55.430",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:symantec:veritas_volume_replicator:3.1:*:windows:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F00219E2-7D07-453C-8495-F2BC2BA2996E"
            },
            {
              "criteria": "cpe:2.3:a:symantec:veritas_volume_replicator:3.5:*:unix:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1B35A994-21E6-4054-B7C0-BEE09C48E10E"
            },
            {
              "criteria": "cpe:2.3:a:symantec:veritas_volume_replicator:4.0:*:unix:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "343C262F-5E28-4D3A-9F4F-FF71218E24BB"
            },
            {
              "criteria": "cpe:2.3:a:symantec:veritas_volume_replicator:4.1:*:unix:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C48AE2B2-E03A-48E1-B48B-5E8FEE5F637C"
            },
            {
              "criteria": "cpe:2.3:a:symantec:veritas_volume_replicator:4.1:*:windows:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1ECDB104-6836-4EE2-830E-06BE222B2666"
            },
            {
              "criteria": "cpe:2.3:a:symantec:veritas_volume_replicator:4.1:rp1:windows:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1BC9AFF0-B574-419F-ADD4-E42102A4B1AD"
            },
            {
              "criteria": "cpe:2.3:a:symantec:veritas_volume_replicator:4.2:*:windows:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "923C308F-4B57-4966-A1B7-CAFBEB77065D"
            },
            {
              "criteria": "cpe:2.3:a:symantec:veritas_volume_replicator:4.2:rp1:windows:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9D4CDBDA-22F5-430E-95DC-CBA173AAD78E"
            },
            {
              "criteria": "cpe:2.3:a:symantec:veritas_volume_replicator:4.2:rp2:windows:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "28CF2817-461F-4C66-A4B8-8C8D5F2296C5"
            },
            {
              "criteria": "cpe:2.3:a:symantec:veritas_volume_replicator:4.3:*:windows:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "91245A00-98AC-45F5-832F-F61B9DC967C3"
            },
            {
              "criteria": "cpe:2.3:a:symantec:veritas_volume_replicator:4.3:mp3:windows:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "41B1E100-4557-4B8A-90C6-940FDFD2A187"
            },
            {
              "criteria": "cpe:2.3:a:symantec:veritas_volume_replicator:5.0:*:unix:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E399AC1E-A782-4BAE-B53D-5E088F8E1086"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}