Signature Detail

APP: Symantec VERITAS Web Server Code Execution

This signature detects attempts to exploit a known vulnerability against Symantec VERITAS Web Server. A successful attack can lead to arbitrary code execution.

Extended Description

Symantec Veritas VRTSweb is prone to a remote code-execution vulnerability. Remote attackers can exploit this issue to execute arbitrary code with elevated privileges. Successful exploits will completely compromise affected computers.

Affected Products

• Hp hp-ux B.11.23
• Hp hp-ux B.11.31
• Symantec backup_exec_continuous_protection_server 11d
• Symantec backup_exec_continuous_protection_server 12.0
• Symantec backup_exec_continuous_protection_server 12.5
• Symantec storage_foundation_for_db2 4.1 (Linux)
• Symantec storage_foundation_for_db2 4.1 (Solaris)
• Symantec storage_foundation_for_db2 5.0 (AIX)
• Symantec storage_foundation_for_db2 5.0 (Linux)
• Symantec storage_foundation_for_high_availability 3.5
• Symantec storage_foundation_for_oracle 4.1 (HP-UX)
• Symantec storage_foundation_for_oracle 4.1 (Solaris)
• Symantec storage_foundation_for_oracle 5.0.1 (HP-UX)
• Symantec storage_foundation_for_oracle 5.0 (AIX)
• Symantec storage_foundation_for_oracle 5.0 (HP-UX)
• Symantec storage_foundation_for_oracle 5.0 (Linux)
• Symantec storage_foundation_for_oracle 5.0 (Solaris)
• Symantec storage_foundation_for_oracle_real_application_cluster 3.5 (HP-UX)
• Symantec storage_foundation_for_oracle_real_application_cluster 4.0 (AIX)
• Symantec storage_foundation_for_oracle_real_application_cluster 4.1 (HP-UX)
• Symantec storage_foundation_for_oracle_real_application_cluster 4.1 (Solaris)
• Symantec storage_foundation_for_oracle_real_application_cluster 5.0 (AIX)
• Symantec storage_foundation_for_oracle_real_application_cluster 5.0 (HP-UX)
• Symantec storage_foundation_for_oracle_real_application_cluster 5.0 (Solaris)
• Symantec storage_foundation_for_sybase 4.1
• Symantec storage_foundation_for_sybase 5.0
• Symantec storage_foundation_manager 1.0
• Symantec storage_foundation_manager 1.0 MP1
• Symantec storage_foundation_manager 1.1
• Symantec storage_foundation_manager 1.1.1Ux
• Symantec storage_foundation_manager 1.1.1Win
• Symantec storage_foundation_manager 2.0
• Symantec veritas_application_director 1.1
• Symantec veritas_application_director 1.1 Platform Expansion
• Symantec veritas_backup_reporter 6.0GA
• Symantec veritas_backup_reporter 6.6
• Symantec veritas_cluster_server 3.5 (HP-UX)
• Symantec veritas_cluster_server 4.0 (AIX)
• Symantec veritas_cluster_server 4.0 (Linux)
• Symantec veritas_cluster_server 4.1 (HP-UX)
• Symantec veritas_cluster_server 4.1 (Linux)
• Symantec veritas_cluster_server 4.1 (Solaris)
• Symantec veritas_cluster_server_management_console 5.1
• Symantec veritas_cluster_server_management_console 5.5
• Symantec veritas_cluster_server_management_console 5.5.1
• Symantec veritas_cluster_server_one 2.0
• Symantec veritas_cluster_server_one 2.0.1
• Symantec veritas_cluster_server_one 2.0.2
• Symantec veritas_command_central_enterprise_reporter 5.0 GA
• Symantec veritas_command_central_enterprise_reporter 5.0 MP1
• Symantec veritas_command_central_enterprise_reporter 5.0 MP1 RP1
• Symantec veritas_command_central_enterprise_reporter 5.1
• Symantec veritas_command_central_storage_(ccs) 4.3
• Symantec veritas_command_central_storage_(ccs) 5.0
• Symantec veritas_command_central_storage_(ccs) 5.1
• Symantec veritas_command_central_storage_change_manager 5.0
• Symantec veritas_micromeasure 5.0
• Symantec veritas_netbackup_operations_manager 6.0 GA
• Symantec veritas_netbackup_operations_manager 6.5 .5
• Symantec veritas_storage_foundation 3.5
• Symantec veritas_storage_foundation_cluster_file_system 3.5 (HP-UX)
• Symantec veritas_storage_foundation_cluster_file_system 4.0
• Symantec veritas_storage_foundation_cluster_file_system 4.1
• Symantec veritas_storage_foundation_cluster_file_system 5.0 (AIX)
• Symantec veritas_storage_foundation_cluster_file_system 5.0 (HP-UX)
• Symantec veritas_storage_foundation_cluster_file_system 5.0 (Linux)
• Symantec veritas_storage_foundation_cluster_file_system 5.0 (Solaris)
• Symantec veritas_storage_foundation_cluster_file_system_for_oracle_rac 5.0 (Linux)
• Symantec veritas_storage_foundation_for_windows_high_availability 4.3MP2
• Symantec veritas_storage_foundation_for_windows_high_availability 5.0
• Symantec veritas_storage_foundation_for_windows_high_availability 5.0Rp1a
• Symantec veritas_storage_foundation_for_windows_high_availability 5.0RP2
• Symantec veritas_storage_foundation_for_windows_high_availability 5.1
• Symantec veritas_storage_foundation_for_windows_high_availability 5.1AP1

References

• BugTraq: 37012
• CVE: CVE-2009-3027