Secunia

A vulnerability has been reported in Storage Exec / StorageCentral, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to boundary errors in multiple DCOM servers that can be accessible via the associated ActiveX controls. This can be exploited to cause stack-based or heap-based buffer overflows.

Successful exploitation allows arbitrary code execution, requires that the user is e.g. tricked into visiting a malicious website.

The vulnerability has been reported in the following product versions:
* VERITAS Storage Exec 5.3 (rev. 2190R)
* VERITAS StorageCentral 5.2 (rev. 322)

Solution
Apply Hotfix.
Further details available in Customer Area

Provided and/or discovered by
The vendor credits Mark Litchfield, NGSSoftware.

Changelog
Further details available in Customer Area

Original Advisory
Symantec:
http://securityresponse.symantec.com/avcenter/security/Content/2005.09.19.html

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area