CVE-2007-4516: Input Validation

Published Feb 21, 2008

Updated

The Volume Manager Scheduler Service (aka VxSchedService.exe) in Symantec Veritas Storage Foundation 5.0 for Windows allows remote attackers to cause a denial of service (daemon crash or hang) via malformed packets.

Affected Software

2 affected components

Symantec Veritas Storage Foundation=5.0

Symantec Veritas Storage Foundation=5.0-32bit

Remediation

Patch Available

http://www.symantec.com/avcenter/security/Content/2008.02.20.html

Event History

Feb 21, 2008

CVE Published

08:44 PM

Feb 22, 2008

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-4516?

CVE-2007-4516 is categorized as a denial of service vulnerability that can lead to the crash or hang of the Volume Manager Scheduler Service.

How do I fix CVE-2007-4516?

To mitigate CVE-2007-4516, it is recommended to apply the latest patches provided by Symantec for Veritas Storage Foundation 5.0.

Which versions are affected by CVE-2007-4516?

CVE-2007-4516 affects Symantec Veritas Storage Foundation version 5.0 for Windows, including both Windows 2000 and 32-bit Windows 2003.

Can CVE-2007-4516 be exploited remotely?

Yes, CVE-2007-4516 can be exploited remotely by sending malformed packets to the affected service.

What is the impact of exploiting CVE-2007-4516?

Exploiting CVE-2007-4516 can result in a denial of service, causing the service to crash or become unresponsive.