Veritas Storage Foundation

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:symantec:veritas_storage_foundation:5.0:*:windows:*:*:*:*:*

part: a version: 5.0 update: *

VendorSymantec (88d7b611-7ce9-5631-abc6-1312dc87ce23)
ProductVeritas Storage Foundation (5c05e0dc-4a3c-5108-9e24-192b78728e67)
Editionwindows
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-3703 vulnerable 2026-06-08 04:50:36.150980 Details available
The management console in the Volume Manager Scheduler Service (aka VxSchedService.exe) in Symantec Veritas Storage Foundation for Windows (SFW) 5.0, 5.0 RP1a, and 5.1 accepts NULL NTLMSSP authentication, which allows remote attackers to execute arbitrary code via requests to the service socket that create "snapshots schedules" registry values specifying future command execution. NOTE: this issue exists because of an incomplete fix for CVE-2007-2279.
Published: 2008-08-18T17:15:00.000Z
Updated: 2024-08-07T09:45:19.186Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-2279 vulnerable 2026-06-08 04:49:44.577663 Details available
The Scheduler Service (VxSchedService.exe) in Symantec Storage Foundation for Windows 5.0 allows remote attackers to bypass authentication and execute arbitrary code via certain requests to the service socket that create (1) PreScript or (2) PostScript registry values under Veritas\VxSvc\CurrentVersion\Schedules specifying future command execution.
Published: 2007-06-04T16:00:00.000Z
Updated: 2024-08-07T13:33:28.339Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.