CVE-2007-1593

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-06-04 · updated 2026-06-16
Weakness: CWE-399

Description

The administrative service in Symantec Veritas Volume Replicator (VVR) for Windows 3.1 through 4.3, and VVR for Unix 3.5 through 5.0, in Symantec Storage Foundation products allows remote attackers to cause a denial of service (memory consumption and service crash) via a crafted packet to the service port (8199/tcp) that triggers a request for more memory than available, which causes the service to write to an invalid pointer.

Affected products

Symantec Veritas Volume Replicator: 3.1, 3.5, 4.0, 4.1, 4.1-rp1, 4.2 (+5)

References

http://cirt.dk/advisories/cirt-53-advisory.txt
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=539
http://osvdb.org/36102
http://secunia.com/advisories/25516
http://www.securityfocus.com/bid/24160
http://www.securitytracker.com/id?1018184
http://www.symantec.com/avcenter/security/Content/2007.06.01a.html
http://www.vupen.com/english/advisories/2007/2036
https://exchange.xforce.ibmcloud.com/vulnerabilities/34676
http://cirt.dk/advisories/cirt-53-advisory.txt
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=539
http://osvdb.org/36102

Get alerted when CVE-2007-1593 or the next vulnerability affects your stack