Intrusion PreventionVeritas.Storage.Foundation.VxSchedService.Authentication.Bypass
Description
This indicates an attack attempt against a buffer-overflow vulnerability in Symantec Veritas Storage Foundation Scheduler Service.
The vulnerability is caused by an error when the vulnerable software handles a specially crafted NTLMSSP authentication. It allows a remote attacker to execute arbitrary code.
Affected Products
Symantec Storage Foundation for Windows 5.1
Symantec Storage Foundation for Windows 5.0 RP1
Symantec Storage Foundation for Windows 5.0
Impact
System Compromise
Recommended Actions
Apply the patch supplied by the vendor:
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2023-08-10 | 25.619 | Name:Symantec. Veritas. Storage. Foundation. Authentication. Bypass:Veritas. Storage. Foundation. VxSchedService. Authentication. Bypass |
| ID | 15913 |
| Created | Mar 12, 2009 |
| Updated | Aug 09, 2023 |
| Risk |
|
| CVE ID | CVE-2008-3703 |
| Exploit Prediction Score | 93.31% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Other |