Signature Detail

APP: Symantec Veritas Enterprise Administrator Service vxsvc Buffer Overflow

This signature detects attempts to exploit a known vulnerability in the Symantec's Veritas Administrator service. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the affected application.

Extended Description

The Symantec Veritas Enterprise Administrator service ('vxsvc.exe') is prone to multiple buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied data. Attackers may leverage these issues to execute arbitrary code with administrative privileges on the affected system. Failed attacks will cause denial-of-service conditions.

Affected Products

• HP HP-UX B.11.11
• HP HP-UX B.11.23
• HP HP-UX B.11.31
• Symantec NetBackup PureDisk 6.5
• Symantec NetBackup PureDisk 6.6
• Symantec NetBackup PureDisk 6.6.0
• Symantec NetBackup PureDisk 6.6.1
• Symantec Veritas Dymanic Multi-Pathing 5.1
• Symantec Veritas Enterprise Administrator
• Symantec Veritas Storage Foundation 3.5
• Symantec Veritas Storage Foundation 4.1 (HP-UX only)
• Symantec Veritas Storage Foundation 5.0
• Symantec Veritas Storage Foundation 5.0.1
• Symantec Veritas Storage Foundation 5.0MP1
• Symantec Veritas Storage Foundation 5.0MP2
• Symantec Veritas Storage Foundation 5.0MP3
• Symantec Veritas Storage Foundation 5.1
• Symantec Veritas Storage Foundation 5.1SP1
• Symantec Veritas Storage Foundation Cluster File System 3.5 (HP-UX)
• Symantec Veritas Storage Foundation Cluster File System 4.0
• Symantec Veritas Storage Foundation Cluster File System 4.1
• Symantec Veritas Storage Foundation Cluster File System 5.0.1
• Symantec Veritas Storage Foundation Cluster File System 5.0 (AIX)
• Symantec Veritas Storage Foundation Cluster File System 5.0 (HP-UX)
• Symantec Veritas Storage Foundation Cluster File System 5.0 (Linux)
• Symantec Veritas Storage Foundation Cluster File System 5.0MP1
• Symantec Veritas Storage Foundation Cluster File System 5.0MP2
• Symantec Veritas Storage Foundation Cluster File System 5.0MP3
• Symantec Veritas Storage Foundation Cluster File System 5.0 (Solaris)
• Symantec Veritas Storage Foundation Cluster File System 5.1
• Symantec Veritas Storage Foundation Cluster File System 5.1SP1
• Symantec Veritas Storage Foundation Cluster File System for Oracle RAC 5.0 (Linux)
• Symantec Veritas Storage Foundation Cluster File System for Oracle RAC 5.0MP2
• Symantec Veritas Storage Foundation Cluster File System for Oracle RAC 5.0MP3
• Symantec Veritas Storage Foundation Cluster File System for Oracle RAC 5.0MP4
• Symantec Veritas Storage Foundation Cluster File System for Oracle RAC 5.0RU3
• Symantec Veritas Storage Foundation Cluster File System for Oracle RAC 5.0RU4
• Symantec Veritas Storage Foundation Cluster File System for Oracle RAC 5.1
• Symantec Veritas Storage Foundation Cluster File System for Oracle RAC 5.1SP1 RP1
• Symantec Veritas Storage Foundation Cluster File System for Oracle RAC 5.1SP1 RP2
• Symantec Veritas Storage Foundation for DB2 3.5 (HP-UX only)
• Symantec Veritas Storage Foundation for DB2 5.0
• Symantec Veritas Storage Foundation for DB2 5.0.1
• Symantec Veritas Storage Foundation for DB2 5.0MP1
• Symantec Veritas Storage Foundation for DB2 5.0MP2
• Symantec Veritas Storage Foundation for DB2 5.0MP3
• Symantec Veritas Storage Foundation for DB2 5.1
• Symantec Veritas Storage Foundation for DB2 5.1SP1
• Symantec Veritas Storage Foundation for High Availability 3.5 (HP-UX only)
• Symantec Veritas Storage Foundation for High Availability 5.0
• Symantec Veritas Storage Foundation for High Availability 5.0.1
• Symantec Veritas Storage Foundation for High Availability 5.0MP1
• Symantec Veritas Storage Foundation for High Availability 5.0MP2
• Symantec Veritas Storage Foundation for High Availability 5.0MP3
• Symantec Veritas Storage Foundation for High Availability 5.1
• Symantec Veritas Storage Foundation for High Availability 5.1SP1
• Symantec Veritas Storage Foundation for Oracle 3.5 (HP-UX only)
• Symantec Veritas Storage Foundation for Oracle 5.0
• Symantec Veritas Storage Foundation for Oracle 5.0.1
• Symantec Veritas Storage Foundation for Oracle 5.0MP1
• Symantec Veritas Storage Foundation for Oracle 5.0MP2
• Symantec Veritas Storage Foundation for Oracle 5.0MP3
• Symantec Veritas Storage Foundation for Oracle 5.1
• Symantec Veritas Storage Foundation for Oracle 5.1SP1
• Symantec Veritas Storage Foundation for Real Application Cluster 3.5 (HP-UX only)
• Symantec Veritas Storage Foundation for Real Application Cluster 5.0
• Symantec Veritas Storage Foundation for Real Application Cluster 5.0.1
• Symantec Veritas Storage Foundation for Real Application Cluster 5.0MP1
• Symantec Veritas Storage Foundation for Real Application Cluster 5.0MP2
• Symantec Veritas Storage Foundation for Real Application Cluster 5.0MP3
• Symantec Veritas Storage Foundation for Real Application Cluster 5.1
• Symantec Veritas Storage Foundation for Real Application Cluster 5.1SP1
• Symantec Veritas Storage Foundation for Sybase 3.5 (HP-UX only)
• Symantec Veritas Storage Foundation for Sybase 5.0
• Symantec Veritas Storage Foundation for Sybase 5.0.1
• Symantec Veritas Storage Foundation for Sybase 5.0MP1
• Symantec Veritas Storage Foundation for Sybase 5.0MP2
• Symantec Veritas Storage Foundation for Sybase 5.0MP3
• Symantec Veritas Storage Foundation for Sybase 5.1
• Symantec Veritas Storage Foundation for Sybase 5.1SP1
• Symantec Veritas Storage Foundation for Windows 5.0
• Symantec Veritas Storage Foundation for Windows 5.0RP1
• Symantec Veritas Storage Foundation for Windows 5.0RP2
• Symantec Veritas Storage Foundation for Windows 5.1
• Symantec Veritas Storage Foundation for Windows 5.1SP1
• Symantec Veritas Storage Foundation for Windows 5.1SP2
• Symantec Veritas Storage Foundation for Windows High Availability 4.3MP2
• Symantec Veritas Storage Foundation for Windows High Availability 5.0
• Symantec Veritas Storage Foundation for Windows High Availability 5.0RP1
• Symantec Veritas Storage Foundation for Windows High Availability 5.0Rp1a
• Symantec Veritas Storage Foundation for Windows High Availability 5.0RP2
• Symantec Veritas Storage Foundation for Windows High Availability 5.1
• Symantec Veritas Storage Foundation for Windows High Availability 5.1AP1
• Symantec Veritas Storage Foundation for Windows High Availability 5.1SP1
• Symantec Veritas Storage Foundation for Windows High Availability 5.1SP2

References

• BugTraq: 49014
• CVE: CVE-2011-0547