Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2007-4347

EPSS 1.35% · P80
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2007-4347

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Multiple integer overflows in the Job Engine (bengine.exe) service in Symantec Backup Exec for Windows Servers (BEWS) 11d build 11.0.7170 and 11.0.6.6235 allow remote attackers to cause a denial of service (CPU and memory consumption) via a crafted packet to port 5633/tcp, which triggers an infinite loop.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Symantec Backup Exec Job引擎多个整数溢出漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Symantec Backup Exec是美国赛门铁克（Symantec）公司的一套业务备份解决方案。该解决方案为虚拟和物理环境提供数据保护和系统恢复功能。 Backup Exec的Job引擎服务中存在两个整数溢出漏洞，远程攻击者可能利用此漏洞导致拒绝服务。 如果远程攻击者向该服务的默认5633/TCP端口发送了畸形报文的话，就可能导致服务陷入死循环，耗尽所有可用内存或消耗大量CPU资源。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2007-4347

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2007-4347

请登录查看更多情报信息。

Same Patch Batch · n/a · 2007-11-29 · 16 CVEs total

CVE-2007-4346Symantec Backup Exec Job引擎空指针引用拒绝服务漏洞
CVE-2007-6156BASE Basic Analysis/Security Engine base_qry_main.php 多个跨站脚本攻击漏洞
CVE-2007-6157SimpleGallery Index.PHP 跨站脚本攻击漏洞
CVE-2007-6158Proverbs Web Calendar Password caladmin.inc.php SQL注入漏洞
CVE-2007-6159Tilde CMS index.php SQL注入漏洞
CVE-2007-6160Tilde CMS index.php 跨站脚本攻击漏洞
CVE-2007-6161Tilde CMS index.php 信息泄露漏洞
CVE-2007-6162FMDeluxe Index.PHP 跨站脚本攻击漏洞
CVE-2007-6163GOUAE DWD Realty "admin/index2.asp" Password SQL注入漏洞
CVE-2007-6164Eurologon CMS 多个SQL注入漏洞
CVE-2007-6165Apple Mail邮件附件处理代码执行漏洞
CVE-2007-6166Apple QuickTime RTSP响应头远程栈溢出漏洞
CVE-2007-6167SuSE yast2-core 本地特权提升漏洞
CVE-2007-6168VUNET Case Manager Default.ASP Username SQL注入漏洞
CVE-2007-6169GOUAE DWD Realty "admin/index2.asp" uname SQL注入漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2007-4347

No comments yet

Leave a comment