CVE-2009-3027
First published: Fri Dec 11 2009(Updated: )
VRTSweb.exe in VRTSweb in Symantec Backup Exec Continuous Protection Server (CPS) 11d, 12.0, and 12.5; Veritas NetBackup Operations Manager (NOM) 6.0 GA through 6.5.5; Veritas Backup Reporter (VBR) 6.0 GA through 6.6; Veritas Storage Foundation (SF) 3.5; Veritas Storage Foundation for Windows High Availability (SFWHA) 4.3MP2, 5.0, 5.0RP1a, 5.0RP2, 5.1, and 5.1AP1; Veritas Storage Foundation for High Availability (SFHA) 3.5; Veritas Storage Foundation for Oracle (SFO) 4.1, 5.0, and 5.0.1; Veritas Storage Foundation for DB2 4.1 and 5.0; Veritas Storage Foundation for Sybase 4.1 and 5.0; Veritas Storage Foundation for Oracle Real Application Cluster (SFRAC) 3.5, 4.0, 4.1, and 5.0; Veritas Storage Foundation Manager (SFM) 1.0, 1.0 MP1, 1.1, 1.1.1Ux, 1.1.1Win, and 2.0; Veritas Cluster Server (VCS) 3.5, 4.0, 4.1, and 5.0; Veritas Cluster Server One (VCSOne) 2.0, 2.0.1, and 2.0.2; Veritas Application Director (VAD) 1.1 and 1.1 Platform Expansion; Veritas Cluster Server Management Console (VCSMC) 5.1, 5.5, and 5.5.1; Veritas Storage Foundation Cluster File System (SFCFS) 3.5, 4.0, 4.1, and 5.0; Veritas Storage Foundation Cluster File System for Oracle RAC (SFCFS RAC) 5.0; Veritas Command Central Storage (CCS) 4.x, 5.0, and 5.1; Veritas Command Central Enterprise Reporter (CC-ER) 5.0 GA, 5.0 MP1, 5.0 MP1RP1, and 5.1; Veritas Command Central Storage Change Manager (CC-SCM) 5.0 and 5.1; and Veritas MicroMeasure 5.0 does not properly validate authentication requests, which allows remote attackers to trigger the unpacking of a WAR archive, and execute arbitrary code in the contained files, via crafted data to TCP port 14300.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Symantec Veritas Cluster Server One | =2.0.1 | |
| Symantec Veritas Storage Foundation For Oracle Real Application Cluster | =3.5 | |
| Symantec Veritas Storage Foundation Cluster File System | =4.0 | |
| Symantec Veritas Storage Foundation Manager | =1.1 | |
| Symantec Veritas Cluster Server | =5.0 | |
| Symantec Veritas Storage Foundation Cluster File System | =5.0 | |
| Symantec Veritas Netbackup Operations Manager | =6.5.5 | |
| Symantec Veritas Storage Foundation For Windows High Availability | =5.0rp1a | |
| Symantec Veritas Storage Foundation Manager | =1.0 | |
| Symantec Veritas Storage Foundation For Windows High Availability | =4.3mp2 | |
| Symantec Veritas Storage Foundation Cluster File System | =3.5 | |
| Symantec Veritas Storage Foundation For Oracle Real Application Cluster | =4.0 | |
| Symantec Veritas Storage Foundation | =3.5 | |
| Symantec Veritas Micromeasure | =5.0 | |
| Symantec Veritas Storage Foundation For Windows High Availability | =5.1 | |
| Symantec Backup Exec Continuous Protection Server | =12.5 | |
| Symantec Veritas Storage Foundation Cluster File System | =4.0 | |
| Symantec Veritas Cluster Server | =5.0 | |
| Symantec Veritas Storage Foundation For High Availability | =3.5 | |
| Symantec Veritas Cluster Server One | =2.0 | |
| Symantec Veritas Storage Foundation For Windows High Availability | =5.1ap1 | |
| Symantec Veritas Netbackup Operations Manager | =6.0_ga | |
| Symantec Veritas Storage Foundation For Oracle Real Application Cluster | =5.0 | |
| Symantec Veritas Storage Foundation For Sybase | =5.0 | |
| Symantec Veritas Storage Foundation For Db2 | =5.0 | |
| Symantec Veritas Command Central Storage | =4.x | |
| Symantec Veritas Application Director | =1.1 | |
| Symantec Veritas Command Central Storage Change Manager | =5.0 | |
| Symantec Veritas Cluster Server | =3.5 | |
| Symantec Veritas Storage Foundation For Oracle | =4.1 | |
| Symantec Veritas Storage Foundation For Windows High Availability | =5.0 | |
| Symantec Veritas Storage Foundation Cluster File System | =4.1 | |
| Symantec Veritas Cluster Server | =5.0 | |
| Symantec Veritas Cluster Server Management Console | =5.1 | |
| Symantec Veritas Command Central Enterprise Reporter | =5.0mp1 | |
| Symantec Veritas Storage Foundation Cluster File System | =5.0 | |
| Symantec Veritas Storage Foundation For Db2 | =4.1 | |
| Symantec Veritas Cluster Server | =4.1 | |
| Symantec Veritas Cluster Server | =4.1 | |
| Symantec Veritas Storage Foundation Manager | =1.1.1ux | |
| Symantec Veritas Storage Foundation Cluster File System | =4.0 | |
| Symantec Veritas Storage Foundation Cluster File System For Oracle Rac | =5.0 | |
| Symantec Veritas Storage Foundation For Db2 | =5.0 | |
| Symantec Veritas Storage Foundation For Db2 | =5.0 | |
| Symantec Veritas Storage Foundation For Oracle Real Application Cluster | =5.0 | |
| Symantec Veritas Netbackup Reporter | =6.6 | |
| Symantec Veritas Command Central Storage | =5.0 | |
| Symantec Veritas Storage Foundation Cluster File System | =4.1 | |
| Symantec Veritas Storage Foundation For Oracle Real Application Cluster | =4.1-hp-ux | |
| Symantec Veritas Netbackup Reporter | =6.0_ga | |
| Symantec Backup Exec Continuous Protection Server | =12.0 | |
| Symantec Veritas Storage Foundation For Oracle Real Application Cluster | =5.0 | |
| Symantec Veritas Command Central Enterprise Reporter | =5.0_ga | |
| Symantec Veritas Storage Foundation For Oracle Real Application Cluster | =4.1 | |
| Symantec Veritas Storage Foundation Cluster File System | =4.1 | |
| Symantec Veritas Storage Foundation For Oracle Real Application Cluster | =4.1 | |
| Symantec Veritas Command Central Storage Change Manager | =5.1 | |
| Symantec Veritas Storage Foundation Cluster File System | =5.0 | |
| Symantec Veritas Cluster Server | =4.0 | |
| Symantec Veritas Storage Foundation For Oracle Real Application Cluster | =5.0 | |
| Symantec Veritas Cluster Server | =4.0 | |
| Symantec Veritas Storage Foundation For Sybase | =4.1 | |
| Symantec Veritas Backup Exec | =11d | |
| Symantec Veritas Storage Foundation For Windows High Availability | =5.0rp2 | |
| Symantec Veritas Cluster Server Management Console | =5.5 | |
| Symantec Veritas Command Central Storage | =5.1 | |
| Symantec Veritas Storae Foundation | =3.5_onwards | |
| Symantec Veritas Storage Foundation Manager | =1.0mp1 | |
| Symantec Veritas Storage Foundation Cluster File System | =5.0 | |
| Symantec Veritas Storage Foundation Cluster File System | =4.1 | |
| Symantec Veritas Storage Foundation Manager | =2.0 | |
| Symantec Veritas Cluster Server | =4.1 | |
| Symantec Veritas Storage Foundation Cluster File System | =4.0 | |
| Symantec Backup Exec Continuous Protection Server | =11d | |
| Symantec Veritas Cluster Server Management Console | =5.5.1 | |
| Symantec Veritas Storage Foundation For Oracle Real Application Cluster | =5.0 | |
| Symantec Veritas Storage Foundation For Oracle Real Application Cluster | =4.0 | |
| Symantec Veritas Storage Foundation For Oracle | =5.0 | |
| Symantec Veritas Cluster Server | =5.0 | |
| Symantec Veritas Storage Foundation Manager | =1.1.1win | |
| Symantec Veritas Cluster Server One | =2.0.2 | |
| Symantec Veritas Application Director | =1.1 | |
| Symantec Veritas Command Central Enterprise Reporter | =5.0mp1rp1 | |
| Symantec Veritas Command Central Enterprise Reporter | =5.1 | |
| Symantec Veritas Storage Foundation For Oracle | =5.0.1 | |
| Symantec Veritas Storage Foundation For Db2 | =4.1 | |
| Symantec Veritas Backup Exec | =12.0 | |
| Symantec Veritas Backup Exec | =12.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.zerodayinitiative.com/advisories/ZDI-09-098/
- http://secunia.com/advisories/37631
- http://securitytracker.com/id?1023309
- http://seer.entsupport.symantec.com/docs/337279.htm
- http://seer.entsupport.symantec.com/docs/336988.htm
- http://www.osvdb.org/60884
- http://marc.info/?l=bugtraq&m=126046186917330&w=2
- http://seer.entsupport.symantec.com/docs/337392.htm
- http://securitytracker.com/id?1023312
- http://seer.entsupport.symantec.com/docs/337293.htm
- http://secunia.com/advisories/37637
- http://www.securityfocus.com/bid/37012
- http://www.vupen.com/english/advisories/2009/3467
- http://seer.entsupport.symantec.com/docs/337859.htm
- http://seer.entsupport.symantec.com/docs/337930.htm
- http://secunia.com/advisories/37685
- http://www.securitytracker.com/id?1023318
- http://www.securitytracker.com/id?1023313
- http://www.securitytracker.com/id?1023311
- http://www.vupen.com/english/advisories/2009/3483
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20091209_00
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54665
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7986
- http://www.securityfocus.com/archive/1/508358/100/0/threaded
- collector/nvd-historical
- collector/nvd-index
- agent/severity
- agent/references
- agent/author
- agent/weakness
- agent/type
- agent/description
- agent/event
- agent/first-publish-date
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/symantec
- canonical/symantec veritas cluster server one
- version/symantec veritas cluster server one/2.0.1
- canonical/symantec veritas storage foundation for oracle real application cluster
- version/symantec veritas storage foundation for oracle real application cluster/3.5
- canonical/symantec veritas storage foundation cluster file system
- version/symantec veritas storage foundation cluster file system/4.0
- canonical/symantec veritas storage foundation manager
- version/symantec veritas storage foundation manager/1.1
- canonical/symantec veritas cluster server
- version/symantec veritas cluster server/5.0
- version/symantec veritas storage foundation cluster file system/5.0
- canonical/symantec veritas netbackup operations manager
- version/symantec veritas netbackup operations manager/6.5.5
- canonical/symantec veritas storage foundation for windows high availability
- version/symantec veritas storage foundation for windows high availability/5.0rp1a
- version/symantec veritas storage foundation manager/1.0
- version/symantec veritas storage foundation for windows high availability/4.3mp2
- version/symantec veritas storage foundation cluster file system/3.5
- version/symantec veritas storage foundation for oracle real application cluster/4.0
- canonical/symantec veritas storage foundation
- version/symantec veritas storage foundation/3.5
- canonical/symantec veritas micromeasure
- version/symantec veritas micromeasure/5.0
- version/symantec veritas storage foundation for windows high availability/5.1
- canonical/symantec backup exec continuous protection server
- version/symantec backup exec continuous protection server/12.5
- canonical/symantec veritas storage foundation for high availability
- version/symantec veritas storage foundation for high availability/3.5
- version/symantec veritas cluster server one/2.0
- version/symantec veritas storage foundation for windows high availability/5.1ap1
- version/symantec veritas netbackup operations manager/6.0_ga
- version/symantec veritas storage foundation for oracle real application cluster/5.0
- canonical/symantec veritas storage foundation for sybase
- version/symantec veritas storage foundation for sybase/5.0
- canonical/symantec veritas storage foundation for db2
- version/symantec veritas storage foundation for db2/5.0
- canonical/symantec veritas command central storage
- version/symantec veritas command central storage/4.x
- canonical/symantec veritas application director
- version/symantec veritas application director/1.1
- canonical/symantec veritas command central storage change manager
- version/symantec veritas command central storage change manager/5.0
- version/symantec veritas cluster server/3.5
- canonical/symantec veritas storage foundation for oracle
- version/symantec veritas storage foundation for oracle/4.1
- version/symantec veritas storage foundation for windows high availability/5.0
- version/symantec veritas storage foundation cluster file system/4.1
- canonical/symantec veritas cluster server management console
- version/symantec veritas cluster server management console/5.1
- canonical/symantec veritas command central enterprise reporter
- version/symantec veritas command central enterprise reporter/5.0mp1
- version/symantec veritas storage foundation for db2/4.1
- version/symantec veritas cluster server/4.1
- version/symantec veritas storage foundation manager/1.1.1ux
- canonical/symantec veritas storage foundation cluster file system for oracle rac
- version/symantec veritas storage foundation cluster file system for oracle rac/5.0
- canonical/symantec veritas netbackup reporter
- version/symantec veritas netbackup reporter/6.6
- version/symantec veritas command central storage/5.0
- version/symantec veritas storage foundation for oracle real application cluster/4.1-hp-ux
- version/symantec veritas netbackup reporter/6.0_ga
- version/symantec backup exec continuous protection server/12.0
- version/symantec veritas command central enterprise reporter/5.0_ga
- version/symantec veritas storage foundation for oracle real application cluster/4.1
- version/symantec veritas command central storage change manager/5.1
- version/symantec veritas cluster server/4.0
- version/symantec veritas storage foundation for sybase/4.1
- canonical/symantec veritas backup exec
- version/symantec veritas backup exec/11d
- version/symantec veritas storage foundation for windows high availability/5.0rp2
- version/symantec veritas cluster server management console/5.5
- version/symantec veritas command central storage/5.1
- canonical/symantec veritas storae foundation
- version/symantec veritas storae foundation/3.5_onwards
- version/symantec veritas storage foundation manager/1.0mp1
- version/symantec veritas storage foundation manager/2.0
- version/symantec backup exec continuous protection server/11d
- version/symantec veritas cluster server management console/5.5.1
- version/symantec veritas storage foundation for oracle/5.0
- version/symantec veritas storage foundation manager/1.1.1win
- version/symantec veritas cluster server one/2.0.2
- version/symantec veritas command central enterprise reporter/5.0mp1rp1
- version/symantec veritas command central enterprise reporter/5.1
- version/symantec veritas storage foundation for oracle/5.0.1
- version/symantec veritas backup exec/12.0
- version/symantec veritas backup exec/12.5