A vulnerability has been reported in Symantec Veritas Storage Foundation, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an input validation error within the Veritas Volume Replicator (VVR) administrative service and can be exploited to e.g. cause the system to consume large amounts of memory via a specially crafted packet sent to the service (default port 8199/TCP).

Successful exploitation requires that the VVR option is installed.

Please see the vendor's advisory for a list of affected versions and platforms.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
Discovered by CIRT.DK and reported via iDefense Labs.

Original Advisory
Symantec:
http://www.symantec.com/avcenter/security/Content/2007.06.01a.html

iDefense Labs:
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=539

CIRT.DK:
http://cirt.dk/advisories/cirt-53-advisory.txt

Deep Links
Links available to Secunia VIM customers