< Back to JetLib.com

jetlib.sec » Tags » vxsvc

« Expand/Collapse

8 items tagged "vxsvc"

Related tags: zero [+], integer overflow [+], initiative [+], day [+], zero day [+], ascii strings [+], veritas [+], symantec veritas [+], symantec [+], storage [+], unicode code [+], ascii string [+]

December 16, 2011
11:29
Symantec Veritas Storage Foundation vxsvc.exe Unicode Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec Veritas Storage Foundation.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: symantec veritas storage symantec-veritas vxsvc unicode-code
December 14, 2011
12:14
Symantec Veritas Storage Foundation vxsvc.exe ASCII String Execution Vulnerability
» ‎ SecuriTeam

The vxsvc.exe ASCII string unpacking code execution vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec Veritas Storage Foundation Administrator Service.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: symantec veritas storage symantec-veritas vxsvc ascii-string

August 16, 2011
16:27
Zero Day Initiative Advisory 11-263
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 11-263 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec Veritas Storage Foundation Administrator Service. Authentication is not required to exploit this vulnerability. The specific flaw exists within vxsvc.exe. The problem affecting the part of the server running on TCP port 2148 is an integer overflow in the function vxveautil.value_binary_unpack during the handling of the ascii strings (opcode 6) where the 32-bit field supplied by the attacker is used for allocating a destination buffer by adding an additional byte to its value. This integer overflow can be used to create a small allocation which will be subsequently overflowed, allowing the attacker to execute arbitrary code under the context of the SYSTEM.
Tags: day zero initiative vxsvc ascii-strings integer-overflow

16:27
Zero Day Initiative Advisory 11-263
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 11-263 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec Veritas Storage Foundation Administrator Service. Authentication is not required to exploit this vulnerability. The specific flaw exists within vxsvc.exe. The problem affecting the part of the server running on TCP port 2148 is an integer overflow in the function vxveautil.value_binary_unpack during the handling of the ascii strings (opcode 6) where the 32-bit field supplied by the attacker is used for allocating a destination buffer by adding an additional byte to its value. This integer overflow can be used to create a small allocation which will be subsequently overflowed, allowing the attacker to execute arbitrary code under the context of the SYSTEM.
Tags: day zero initiative vxsvc ascii-strings integer-overflow

16:27
Zero Day Initiative Advisory 11-263
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 11-263 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec Veritas Storage Foundation Administrator Service. Authentication is not required to exploit this vulnerability. The specific flaw exists within vxsvc.exe. The problem affecting the part of the server running on TCP port 2148 is an integer overflow in the function vxveautil.value_binary_unpack during the handling of the ascii strings (opcode 6) where the 32-bit field supplied by the attacker is used for allocating a destination buffer by adding an additional byte to its value. This integer overflow can be used to create a small allocation which will be subsequently overflowed, allowing the attacker to execute arbitrary code under the context of the SYSTEM.
Tags: day zero initiative vxsvc ascii-strings integer-overflow

16:22
Zero Day Initiative Advisory 11-262
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 11-262 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec Veritas Storage Foundation. Authentication is not required to exploit this vulnerability. The specific flaw exists within the vxsvc.exe process. The problem affecting the part of the server running on TCP port 2148 is an integer overflow in the function vxveautil.value_binary_unpack where a 32-bit field holds a value that, through some calculation, can be used to create a smaller heap buffer than required to hold user-supplied data. This can be leveraged to cause an overflow of the heap buffer, allowing the attacker to execute arbitrary code under the context of SYSTEM.
Tags: day zero initiative vxsvc integer-overflow zero-day

16:22
Zero Day Initiative Advisory 11-262
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 11-262 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec Veritas Storage Foundation. Authentication is not required to exploit this vulnerability. The specific flaw exists within the vxsvc.exe process. The problem affecting the part of the server running on TCP port 2148 is an integer overflow in the function vxveautil.value_binary_unpack where a 32-bit field holds a value that, through some calculation, can be used to create a smaller heap buffer than required to hold user-supplied data. This can be leveraged to cause an overflow of the heap buffer, allowing the attacker to execute arbitrary code under the context of SYSTEM.
Tags: day zero initiative vxsvc integer-overflow zero-day

16:22
Zero Day Initiative Advisory 11-262
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 11-262 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec Veritas Storage Foundation. Authentication is not required to exploit this vulnerability. The specific flaw exists within the vxsvc.exe process. The problem affecting the part of the server running on TCP port 2148 is an integer overflow in the function vxveautil.value_binary_unpack where a 32-bit field holds a value that, through some calculation, can be used to create a smaller heap buffer than required to hold user-supplied data. This can be leveraged to cause an overflow of the heap buffer, allowing the attacker to execute arbitrary code under the context of SYSTEM.
Tags: day zero initiative vxsvc integer-overflow zero-day