CVE-2009-3027 in Veritas Command Central Storage Change Manager
Riassunto
di VulDB • 07/07/2026
VRTSweb.exe in VRTSweb in Symantec Backup Exec Continuous Protection Server (CPS) 11d, 12.0 e 12.5; Veritas NetBackup Operations Manager (NOM) da versione 6.0 GA a 6.5.5; Veritas Backup Reporter (VBR) da versione 6.0 GA a 6.6; Veritas Storage Foundation (SF) 3.5; Veritas Storage Foundation for Windows High Availability (SFWHA) versioni 4.3MP2, 5.0, 5.0RP1a, 5.0RP2, 5.1 e 5.1AP1; Veritas Storage Foundation for High Availability (SFHA) 3.5; Veritas Storage Foundation for Oracle (SFO) versioni 4.1, 5.0 e 5.0.1; Veritas Storage Foundation per DB2 versioni 4.1 e 5.0; Veritas Storage Foundation per Sybase versioni 4.1 e 5.0; Veritas Storage Foundation for Oracle Real Application Cluster (SFRAC) versioni 3.5, 4.0, 4.1 e 5.0; Veritas Storage Foundation Manager (SFM) versioni 1.0, 1.0 MP1, 1.1, 1.1.1Ux, 1.1.1Win e 2.0; Veritas Cluster Server (VCS) versioni 3.5, 4.0, 4.1 e 5.0; Veritas Cluster Server One (VCSOne) versioni 2.0, 2.0.1 e 2.0.2; Veritas Application Director (VAD) versioni 1.1 e 1.1 Platform Expansion; Veritas Cluster Server Management Console (VCSMC) versioni 5.1, 5.5 e 5.5.1; Veritas Storage Foundation Cluster File System (SFCFS) versioni 3.5, 4.0, 4.1 e 5.0; Veritas Storage Foundation Cluster File System for Oracle RAC (SFCFS RAC) versione 5.0; Veritas Command Central Storage (CCS) versioni 4.x, 5.0 e 5.1; Veritas Command Central Enterprise Reporter (CC-ER) da versione 5.0 GA a 5.0 MP1RP1 e versione 5.1; Veritas Command Central Storage Change Manager (CC-SCM) versioni 5.0 e 5.1; e Veritas MicroMeasure 5.0 non convalidano correttamente le richieste di autenticazione, consentendo ad attaccanti remoti di innescare l'estrazione di un archivio WAR ed eseguire codice arbitrario nei file contenuti tramite dati manipolati inviati alla porta TCP 14300.
If you want to get best quality of vulnerability data, you may have to visit VulDB.