← Vulnerability feed

Vulnerability record · CVE-2007-3509 · published 12 July 2007

CVE-2007-3509: Symantec veritas backup exec vulnerability

Symantec · Veritas Backup Exec

Heap-based buffer overflow in the RPC subsystem in Symantec Backup Exec for Windows Servers 10.0, 10d, and 11d allows remote attackers to cause a denial of service (process exit) and possibly execute arbitrary code via crafted ncacn_ip_tcp requests.

7.5 CVSS 2.0 High EPSS 6.9% · top 6.1%
7.5CVSS 2.0 base score
6.9%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
18References
16 Jun 2026Last modified by NVD

Description

Heap-based buffer overflow in the RPC subsystem in Symantec Backup Exec for Windows Servers 10.0, 10d, and 11d allows remote attackers to cause a denial of service (process exit) and possibly execute arbitrary code via crafted ncacn_ip_tcp requests.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=553 Vendor Advisory
http://secunia.com/advisories/26032 Vendor Advisory
http://securityresponse.symantec.com/avcenter/security/Content/2007.07.11a.html PatchVendor Advisory
http://www.kb.cert.org/vuls/id/213697 US Government Resource
http://www.osvdb.org/36111
http://www.securityfocus.com/bid/23897 Patch
http://www.securitytracker.com/id?1018366
http://www.vupen.com/english/advisories/2007/2505
https://exchange.xforce.ibmcloud.com/vulnerabilities/35340
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=553 Vendor Advisory
http://secunia.com/advisories/26032 Vendor Advisory
http://securityresponse.symantec.com/avcenter/security/Content/2007.07.11a.html PatchVendor Advisory
http://www.kb.cert.org/vuls/id/213697 US Government Resource
http://www.osvdb.org/36111
http://www.securityfocus.com/bid/23897 Patch
http://www.securitytracker.com/id?1018366
http://www.vupen.com/english/advisories/2007/2505
https://exchange.xforce.ibmcloud.com/vulnerabilities/35340

Track CVE-2007-3509 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2009-3027Symantec backup exec continuous protection server improper authentication vulnerabilityVRTSweb.exe in VRTSweb in Symantec Backup Exec Continuous Protection Server (CPS) 11d, 12.0, and 12.5; Veritas NetBackup Operations Manager (NOM) 6.0…EPSS 11%10.0CVE-2007-5126Symantec veritas backup exec vulnerabilityUnspecified vulnerability in the client in Symantec Veritas Backup Exec for Windows Servers 11d has unknown impact and remote attack vectors. NOTE: t…EPSS 1.5%

Source: NIST National Vulnerability Database (record CVE-2007-3509), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.