CVE-2009-3027
VRTSweb.exe in VRTSweb in Symantec Backup Exec Continuous Protection Server (CPS) 11d, 12.0, and 12.5; Veritas NetBackup Operations Manager (NOM) 6.0 GA through 6.5.5; Veritas Backup Reporter (VBR) 6.0 GA through 6.6; Veritas Storage Foundation (SF)…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 10.6%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
VRTSweb.exe in VRTSweb in Symantec Backup Exec Continuous Protection Server (CPS) 11d, 12.0, and 12.5; Veritas NetBackup Operations Manager (NOM) 6.0 GA through 6.5.5; Veritas Backup Reporter (VBR) 6.0 GA through 6.6; Veritas Storage Foundation (SF) 3.5; Veritas Storage Foundation for Windows High Availability (SFWHA) 4.3MP2, 5.0, 5.0RP1a, 5.0RP2, 5.1, and 5.1AP1; Veritas Storage Foundation for High Availability (SFHA) 3.5; Veritas Storage Foundation for Oracle (SFO) 4.1, 5.0, and 5.0.1; Veritas Storage Foundation for DB2 4.1 and 5.0; Veritas Storage Foundation for Sybase 4.1 and 5.0; Veritas Storage Foundation for Oracle Real Application Cluster (SFRAC) 3.5, 4.0, 4.1, and 5.0; Veritas Storage Foundation Manager (SFM) 1.0, 1.0 MP1, 1.1, 1.1.1Ux, 1.1.1Win, and 2.0; Veritas Cluster Server (VCS) 3.5, 4.0, 4.1, and 5.0; Veritas Cluster Server One (VCSOne) 2.0, 2.0.1, and 2.0.2; Veritas Application Director (VAD) 1.1 and 1.1 Platform Expansion; Veritas Cluster Server Management Console (VCSMC) 5.1, 5.5, and 5.5.1; Veritas Storage Foundation Cluster File System (SFCFS) 3.5, 4.0, 4.1, and 5.0; Veritas Storage Foundation Cluster File System for Oracle RAC (SFCFS RAC) 5.0; Veritas Command Central Storage (CCS) 4.x, 5.0, and 5.1; Veritas Command Central Enterprise Reporter (CC-ER) 5.0 GA, 5.0 MP1, 5.0 MP1RP1, and 5.1; Veritas Command Central Storage Change Manager (CC-SCM) 5.0 and 5.1; and Veritas MicroMeasure 5.0 does not properly validate authentication requests, which allows remote attackers to trigger the unpacking of a WAR archive, and execute arbitrary code in the contained files, via crafted data to TCP port 14300.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 10.61% probability · 96th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Weakness
- CWE-287
- Affected
- symantec/backup exec continuous protection server · symantec/veritas application director · symantec/veritas backup exec · symantec/veritas cluster server · symantec/veritas cluster server management console · symantec/veritas cluster server one · symantec/veritas command central enterprise reporter · symantec/veritas command central storage · symantec/veritas command central storage change manager · symantec/veritas micromeasure · symantec/veritas netbackup operations manager · symantec/veritas netbackup reporter · symantec/veritas storae foundation · symantec/veritas storage foundation · symantec/veritas storage foundation cluster file system · symantec/veritas storage foundation cluster file system for oracle rac · symantec/veritas storage foundation for db2 · symantec/veritas storage foundation for high availability · symantec/veritas storage foundation for oracle · symantec/veritas storage foundation for oracle real application cluster · +3 more
- Source
- cve@mitre.org
EPSS 10.6% since 26 October 2026; no change recorded yet. The dashed line is the ten per cent mark our analysts treat as “patch before the next change window”. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
References
- http://marc.info/?l=bugtraq&m=126046186917330&w=2Patch
- http://secunia.com/advisories/37631Vendor Advisory
- http://secunia.com/advisories/37637Vendor Advisory
- http://secunia.com/advisories/37685Vendor Advisory
- http://securitytracker.com/id?1023309
- http://securitytracker.com/id?1023312
- http://seer.entsupport.symantec.com/docs/336988.htmPatch, Vendor Advisory
- http://seer.entsupport.symantec.com/docs/337279.htmPatch, Vendor Advisory
- http://seer.entsupport.symantec.com/docs/337293.htmPatch, Vendor Advisory
- http://seer.entsupport.symantec.com/docs/337392.htmPatch, Vendor Advisory
- http://seer.entsupport.symantec.com/docs/337859.htmPatch, Vendor Advisory
- http://seer.entsupport.symantec.com/docs/337930.htmPatch, Vendor Advisory
- http://www.osvdb.org/60884
- http://www.securityfocus.com/archive/1/508358/100/0/threaded
- http://www.securityfocus.com/bid/37012
- http://www.securitytracker.com/id?1023311
- http://www.securitytracker.com/id?1023313
- http://www.securitytracker.com/id?1023318
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20091209_00
- http://www.vupen.com/english/advisories/2009/3467Vendor Advisory
- http://www.vupen.com/english/advisories/2009/3483Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-09-098/Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54665
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7986
- http://marc.info/?l=bugtraq&m=126046186917330&w=2Patch
- http://secunia.com/advisories/37631Vendor Advisory
- http://secunia.com/advisories/37637Vendor Advisory
- http://secunia.com/advisories/37685Vendor Advisory
- http://securitytracker.com/id?1023309
- http://securitytracker.com/id?1023312
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.