CVE-2007-3509

Heap-based buffer overflow in the RPC subsystem in Symantec Backup Exec for Windows Servers 10.0, 10d, and 11d allows remote attackers to cause a denial of service (process exit) and possibly execute arbitrary code via crafted ncacn_ip_tcp requests.

• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=553Vendor Advisory
• http://secunia.com/advisories/26032Vendor Advisory
• http://securityresponse.symantec.com/avcenter/security/Content/2007.07.11a.htmlPatch, Vendor Advisory
• http://www.kb.cert.org/vuls/id/213697US Government Resource
• http://www.osvdb.org/36111
• http://www.securityfocus.com/bid/23897Patch
• http://www.securitytracker.com/id?1018366
• http://www.vupen.com/english/advisories/2007/2505
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35340
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=553Vendor Advisory
• http://secunia.com/advisories/26032Vendor Advisory
• http://securityresponse.symantec.com/avcenter/security/Content/2007.07.11a.htmlPatch, Vendor Advisory
• http://www.kb.cert.org/vuls/id/213697US Government Resource
• http://www.osvdb.org/36111
• http://www.securityfocus.com/bid/23897Patch
• http://www.securitytracker.com/id?1018366
• http://www.vupen.com/english/advisories/2007/2505
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35340

Published

Jul 12, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-3503The Javadoc tool in Sun JDK 6 and JDK 5.0 Update 11 can gene…
• CVE-2007-3504Directory traversal vulnerability in the PersistenceService …
• CVE-2007-3505Multiple directory traversal vulnerabilities in QuickTalk fo…
• CVE-2007-3506The ft_bitmap_assure_buffer function in src/base/ftbimap.c i…
• CVE-2007-3507Stack-based buffer overflow in the local__vcentry_parse_valu…
• CVE-2007-3508Integer overflow in the process_envvars function in elf/rtld…
• CVE-2007-3510Buffer overflow in the IMAP service in IBM Lotus Domino befo…
• CVE-2007-3511The focus handling for the onkeydown event in Mozilla Firefo…
• CVE-2007-3512Stack-based buffer overflow in Lhaca File Archiver before 1.…
• CVE-2007-3513The lcd_write function in drivers/usb/misc/usblcd.c in the L…
• CVE-2007-3514Cross-domain vulnerability in Apple Safari for Windows 3.0.2…
• CVE-2007-3515SQL injection vulnerability in view_event.php in TotalCalend…