Unscored severity · published Nov 29, 2007
CVE-2007-4347
Multiple integer overflows in the Job Engine (bengine.exe) service in Symantec Backup Exec for Windows Servers (BEWS) 11d build 11.0.7170 and 11.0.6.6235 allow remote attackers to…
–
CVSS
2.9%
EPSS
No
On KEV
Description
Multiple integer overflows in the Job Engine (bengine.exe) service in Symantec Backup Exec for Windows Servers (BEWS) 11d build 11.0.7170 and 11.0.6.6235 allow remote attackers to cause a denial of service (CPU and memory consumption) via a crafted packet to port 5633/tcp, which triggers an infinite loop.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.9% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BS
Backupexec System Recovery · Symantec
11.0.6235; 11.0.7170 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-4347
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-4347
Patch
http://secunia.com/advisories/26975
Vendor Advisory
http://secunia.com/secunia_research/2007-74/advisory/
Patch
http://securityresponse.symantec.com/avcenter/security/Content/2007.11.27.html
www.securityfocus.com
http://www.securityfocus.com/archive/1/484318/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/484333/100/0/threaded
Patch
http://www.securityfocus.com/bid/26029
More from Backupexec System Recovery
–
CVE-2012-0305
Untrusted search path vulnerability in Symantec System Recovery 2011 before SP2 and Backup Exec System Recovery 2010 before SP5 allows local users to gain privileges via a Trojan…
–
CVE-2008-2512
Directory traversal vulnerability in Symantec Backup Exec System Recovery Manager 7.x before 7.0.4 and 8.x before 8.0.2 allows remote attackers to read arbitrary files via…
–
CVE-2008-0457
Unrestricted file upload vulnerability in the FileUpload class running on the Symantec LiveState Apache Tomcat server, as used by Symantec Backup Exec System Recovery Manager 7.0…
–
CVE-2007-4346
The Job Engine (bengine.exe) service in Symantec Backup Exec for Windows Servers (BEWS) 11d build 11.0.7170 and 11.0.6.6235 allows remote attackers to cause a denial of service…
–
CVE-2007-2359
Buffer overflow in Ghost Service Manager, as used in Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, allows…