Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Heap-based buffer overflow in the RPC subsystem in Symantec Backup Exec for Windows Servers 10.0, 10d, and 11d allows remote attackers to cause a denial of service (process exit) and possibly execute arbitrary code via crafted ncacn_ip_tcp requests.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Symantec Backup Exec RPC接口远程堆溢出漏洞
Vulnerability Description
Symantec Backup Exec是美国赛门铁克(Symantec)公司的一套业务备份解决方案。该解决方案为虚拟和物理环境提供数据保护和系统恢复功能。 Symantec Backup Exec在处理畸形的RPC请求时存在缓冲区溢出漏洞,远程攻击者可能利用此漏洞控制服务器。 Symantec Backup Exec监听于TCP 6106端口上的RPC服务程序没有正确地过滤用户输入,在使用ncacn_ip_tcp协议处理用户所提交的RPC请求时将用户提供的数据拷贝到了固定大小的堆缓冲区,因此如果用户提交
CVSS Information
N/A
Vulnerability Type
N/A