CVE-2007-1593

The administrative service in Symantec Veritas Volume Replicator (VVR) for Windows 3.1 through 4.3, and VVR for Unix 3.5 through 5.0, in Symantec Storage Foundation products allows remote attackers to cause a denial of service (memory consumption and service crash) via a crafted packet to the service port (8199/tcp) that triggers a request for more memory than available, which causes the service to write to an invalid pointer.

• CWE-399

• http://cirt.dk/advisories/cirt-53-advisory.txt
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=539Patch, Vendor Advisory
• http://osvdb.org/36102
• http://secunia.com/advisories/25516Vendor Advisory
• http://www.securityfocus.com/bid/24160
• http://www.securitytracker.com/id?1018184
• http://www.symantec.com/avcenter/security/Content/2007.06.01a.htmlPatch
• http://www.vupen.com/english/advisories/2007/2036Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34676
• http://cirt.dk/advisories/cirt-53-advisory.txt
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=539Patch, Vendor Advisory
• http://osvdb.org/36102
• http://secunia.com/advisories/25516Vendor Advisory
• http://www.securityfocus.com/bid/24160
• http://www.securitytracker.com/id?1018184
• http://www.symantec.com/avcenter/security/Content/2007.06.01a.htmlPatch
• http://www.vupen.com/english/advisories/2007/2036Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34676

Published

Jun 4, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-1587templates/config/mail.tpl in Tim Soderstrom StatsDawg 0.92 a…
• CVE-2007-1588server.cpp in MyServer 0.8.5 calls Process::setuid before ca…
• CVE-2007-1589TrueCrypt before 4.3, when set-euid mode is used on Linux, a…
• CVE-2007-1590The Grandstream BudgeTone 200 IP phone, with program 1.1.1.1…
• CVE-2007-1591VsapiNT.sys in the Scan Engine 8.0 for Trend Micro AntiVirus…
• CVE-2007-1592net/ipv6/tcp_ipv6.c in Linux kernel 2.6.x up to 2.6.21-rc3 i…
• CVE-2007-1594The handle_response function in chan_sip.c in Asterisk befor…
• CVE-2007-1595The Asterisk Extension Language (AEL) in pbx/pbx_ael.c in As…
• CVE-2007-1596Multiple PHP remote file inclusion vulnerabilities in the NF…
• CVE-2007-1597Unclassified NewsBoard 1.6.3 stores sensitive information un…
• CVE-2007-1598Stack-based buffer overflow in InterVations FileCOPA FTP Ser…
• CVE-2007-1599wp-login.php in WordPress allows remote attackers to redirec…