CVE-2007-4346
Severity Score
5.0
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The Job Engine (bengine.exe) service in Symantec Backup Exec for Windows Servers (BEWS) 11d build 11.0.7170 and 11.0.6.6235 allows remote attackers to cause a denial of service (NULL dereference and service crash) via a crafted packet to port 5633/tcp.
El servicio Job Engine (bengine.exe) de Symantec Backup Exec for Windows Servers (BEWS) 11d buils 11.0.7170 y 11.0.6.6235 permite a atacantes remotos provocar una denegación de servicio (referencia a NULL y caída del servicio) mediante un paquete manipulado al puerto 5633/tcp.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2007-08-14 CVE Reserved
- 2007-11-29 CVE Published
- 2024-08-07 CVE Updated
- 2024-11-09 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-399: Resource Management Errors
CAPEC
References (9)
| URL | Tag | Source |
|---|---|---|
| http://securitytracker.com/id?1019001 | Vdb Entry | |
| http://www.securityfocus.com/archive/1/484318/100/0/threaded | Mailing List | |
| http://www.securityfocus.com/archive/1/484333/100/0/threaded | Mailing List | |
| http://www.securityfocus.com/bid/26028 | Vdb Entry | |
| http://www.vupen.com/english/advisories/2007/4019 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/38676 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://secunia.com/advisories/26975 | 2018-10-15 | |
| http://secunia.com/secunia_research/2007-74/advisory | 2018-10-15 | |
| http://securityresponse.symantec.com/avcenter/security/Content/2007.11.27.html | 2018-10-15 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Symantec Search vendor "Symantec" | Backupexec System Recovery Search vendor "Symantec" for product "Backupexec System Recovery" | 11.0.6235 Search vendor "Symantec" for product "Backupexec System Recovery" and version "11.0.6235" | windows |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Backupexec System Recovery Search vendor "Symantec" for product "Backupexec System Recovery" | 11.0.7170 Search vendor "Symantec" for product "Backupexec System Recovery" and version "11.0.7170" | windows |
Affected
| ||||||