CVE-2007-2279

The Scheduler Service (VxSchedService.exe) in Symantec Storage Foundation for Windows 5.0 allows remote attackers to bypass authentication and execute arbitrary code via certain requests to the service socket that create (1) PreScript or (2) PostScript registry values under Veritas\VxSvc\CurrentVersion\Schedules specifying future command execution.

• CWE-264

• http://osvdb.org/36104
• http://secunia.com/advisories/25537Vendor Advisory
• http://seer.entsupport.symantec.com/docs/288627.htm
• http://www.securityfocus.com/archive/1/470562/100/0/threaded
• http://www.securityfocus.com/bid/24194
• http://www.securitytracker.com/id?1018188
• http://www.symantec.com/avcenter/security/Content/2007.06.01.htmlPatch, Vendor Advisory
• http://www.vupen.com/english/advisories/2007/2035Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34680
• http://osvdb.org/36104
• http://secunia.com/advisories/25537Vendor Advisory
• http://seer.entsupport.symantec.com/docs/288627.htm
• http://www.securityfocus.com/archive/1/470562/100/0/threaded
• http://www.securityfocus.com/bid/24194
• http://www.securitytracker.com/id?1018188
• http://www.symantec.com/avcenter/security/Content/2007.06.01.htmlPatch, Vendor Advisory
• http://www.vupen.com/english/advisories/2007/2035Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34680

Published

Jun 4, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-2273PHP remote file inclusion vulnerability in include/loading.p…
• CVE-2007-2274The BitTorrent implementation in Opera 9.2 allows remote att…
• CVE-2007-2275Unspecified vulnerability in HP StorageWorks Command View Ad…
• CVE-2007-22763Com TippingPoint IPS allows remote attackers to cause a den…
• CVE-2007-2277Session fixation vulnerability in Plogger allows remote atta…
• CVE-2007-2278Multiple PHP remote file inclusion vulnerabilities in DCP-Po…
• CVE-2007-2280Stack-based buffer overflow in OmniInet.exe (aka the backup …
• CVE-2007-2281Integer overflow in the _ncp32._NtrpTCPReceiveMsg function i…
• CVE-2007-2282Cisco Network Services (CNS) NetFlow Collection Engine (NFC)…
• CVE-2007-2283Buffer overflow in Fresh View 7.15 allows user-assisted remo…
• CVE-2007-2284Buffer overflow in ABC-View Manager 1.42 allows user-assiste…
• CVE-2007-2285Directory traversal vulnerability in examples/layout/feed-pr…