CVE-2011-0547 in Symantec NetBackup PureDisk
요약 (영어)
Multiple integer overflows in vxsvc.exe in the Veritas Enterprise Administrator service in Symantec Veritas Storage Foundation 5.1 and earlier, Veritas Storage Foundation Cluster File System (SFCFS) 5.1 and earlier, Veritas Storage Foundation Cluster File System Enterprise for Oracle RAC (SFCFSORAC) 5.1 and earlier, Veritas Dynamic Multi-Pathing (DMP) 5.1, and NetBackup PureDisk 6.5.x through 6.6.1.x allow remote attackers to execute arbitrary code via (1) a crafted Unicode string, related to the vxveautil.value_binary_unpack function; (2) a crafted ASCII string, related to the vxveautil.value_binary_unpack function; or (3) a crafted value, related to the vxveautil.kv_binary_unpack function, leading to a buffer overflow.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
예약하다
2011. 01. 20.
공개
2011. 08. 19.
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 58339 | Symantec NetBackup PureDisk File System vxsvc.exe vxveautil.kv_binary_unpack 원격 코드 실행 | 189 | 정의되지 않음 | 정의되지 않음 | CVE-2011-0547 |