CVE-2007-4347

Severity Score

7.8

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Multiple integer overflows in the Job Engine (bengine.exe) service in Symantec Backup Exec for Windows Servers (BEWS) 11d build 11.0.7170 and 11.0.6.6235 allow remote attackers to cause a denial of service (CPU and memory consumption) via a crafted packet to port 5633/tcp, which triggers an infinite loop.

Múltiples desbordamientos de entero en el servicio Job Engine (bengine.exe) de Symantec Backup Exec para Windows Servers (BEWS) 11d build 11.0.7170 y 11.0.6.6235 permite a atacantes remotos provocar una denegación de servicio (consumo de CPU y memoria) mediante un paquete artesanal al puerto 5633/tcp, lo cual provoca un bucle infinito.

*Credits: N/A

CVSS Scores

NISTv2 7.8

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2007-08-14 CVE Reserved
2007-11-29 CVE Published
2024-08-07 CVE Updated
2024-11-09 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-189: Numeric Errors

CAPEC

References (9)

URL	Tag	Source
http://www.securityfocus.com/archive/1/484318/100/0/threaded	Mailing List
http://www.securityfocus.com/archive/1/484333/100/0/threaded	Mailing List
http://www.securitytracker.com/id?1019001	Vdb Entry
http://www.vupen.com/english/advisories/2007/4019	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/38677	Vdb Entry

URL	Date	SRC

URL	Date	SRC
http://secunia.com/advisories/26975	2018-10-15
http://securityresponse.symantec.com/avcenter/security/Content/2007.11.27.html	2018-10-15
http://www.securityfocus.com/bid/26029	2018-10-15

URL	Date	SRC
http://secunia.com/secunia_research/2007-74/advisory	2018-10-15

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Symantec Search vendor "Symantec"		Backupexec System Recovery Search vendor "Symantec" for product "Backupexec System Recovery"				11.0.6235 Search vendor "Symantec" for product "Backupexec System Recovery" and version "11.0.6235"		windows		Affected
Symantec Search vendor "Symantec"		Backupexec System Recovery Search vendor "Symantec" for product "Backupexec System Recovery"				11.0.7170 Search vendor "Symantec" for product "Backupexec System Recovery" and version "11.0.7170"		windows		Affected