CVE-2007-4347: Integer Overflow
Multiple integer overflows in the Job Engine (bengine.exe) service in Symantec Backup Exec for Windows Servers (BEWS) 11d build 11.0.7170 and 11.0.6.6235 allow remote attackers to cause a denial of service (CPU and memory consumption) via a crafted packet to port 5633/tcp, which triggers an infinite loop.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-4347?
CVE-2007-4347 is classified as a medium severity vulnerability due to its potential to cause denial of service.
How do I fix CVE-2007-4347?
To mitigate CVE-2007-4347, update Symantec Backup Exec to a version that addresses this vulnerability.
What impact does CVE-2007-4347 have on systems?
CVE-2007-4347 can lead to significant CPU and memory consumption, resulting in service interruptions.
Which software versions are affected by CVE-2007-4347?
CVE-2007-4347 specifically affects Symantec Backup Exec versions 11.0.7170 and 11.0.6235 running on Windows.
Can CVE-2007-4347 be exploited remotely?
Yes, CVE-2007-4347 can be exploited remotely by sending crafted packets to port 5633.