← Vulnerability feed

Vulnerability record · CVE-2008-3703 · published 18 August 2008

CVE-2008-3703: Symantec veritas storage foundation improper authentication vulnerability

Symantec · Veritas Storage Foundation

The management console in the Volume Manager Scheduler Service (aka VxSchedService.exe) in Symantec Veritas Storage Foundation for Windows (SFW) 5.0, 5.0 RP1a, and 5.1 accepts NULL NTLMSSP authentication, which allows remote attackers to execute arbitrary code via requests to the service socket that create "snapshots schedules" registry values specifying future command execution. NOTE: this issue exists because of an incomplete fix for CVE-2007-2279.

10.0 CVSS 2.0 High EPSS 12% · top 4.0% CWE-287 · Improper authentication
10.0CVSS 2.0 base score
12%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
22References
16 Jun 2026Last modified by NVD

Description

The management console in the Volume Manager Scheduler Service (aka VxSchedService.exe) in Symantec Veritas Storage Foundation for Windows (SFW) 5.0, 5.0 RP1a, and 5.1 accepts NULL NTLMSSP authentication, which allows remote attackers to execute arbitrary code via requests to the service socket that create "snapshots schedules" registry values specifying future command execution. NOTE: this issue exists because of an incomplete fix for CVE-2007-2279.

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/31486 Vendor Advisory
http://securityreason.com/securityalert/4161
http://securitytracker.com/id?1020699
http://seer.entsupport.symantec.com/docs/306386.htm Patch
http://www.securityfocus.com/archive/1/495481
http://www.securityfocus.com/archive/1/495487/100/0/threaded
http://www.securityfocus.com/bid/30596
http://www.symantec.com/avcenter/security/Content/2008.08.14a.html
http://www.vupen.com/english/advisories/2008/2395
http://www.zerodayinitiative.com/advisories/ZDI-08-053/
https://exchange.xforce.ibmcloud.com/vulnerabilities/44466
http://secunia.com/advisories/31486 Vendor Advisory
http://securityreason.com/securityalert/4161
http://securitytracker.com/id?1020699
http://seer.entsupport.symantec.com/docs/306386.htm Patch
http://www.securityfocus.com/archive/1/495481
http://www.securityfocus.com/archive/1/495487/100/0/threaded
http://www.securityfocus.com/bid/30596
http://www.symantec.com/avcenter/security/Content/2008.08.14a.html
http://www.vupen.com/english/advisories/2008/2395
http://www.zerodayinitiative.com/advisories/ZDI-08-053/
https://exchange.xforce.ibmcloud.com/vulnerabilities/44466

Track CVE-2008-3703 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2011-0547Symantec veritas dynamic multi-pathing vulnerabilityMultiple integer overflows in vxsvc.exe in the Veritas Enterprise Administrator service in Symantec Veritas Storage Foundation 5.1 and earlier, Verit…EPSS 6.6%10.0CVE-2009-3027Symantec backup exec continuous protection server improper authentication vulnerabilityVRTSweb.exe in VRTSweb in Symantec Backup Exec Continuous Protection Server (CPS) 11d, 12.0, and 12.5; Veritas NetBackup Operations Manager (NOM) 6.0…EPSS 11%9.3CVE-2008-0638Symantec veritas storage foundation memory buffer overflow vulnerabilityHeap-based buffer overflow in the Veritas Enterprise Administrator (VEA) service (aka vxsvc.exe) in Symantec Veritas Storage Foundation 5.0 allows re…EPSS 6.0%9.3CVE-2007-2279Symantec veritas storage foundation permissions and access controls vulnerabilityThe Scheduler Service (VxSchedService.exe) in Symantec Storage Foundation for Windows 5.0 allows remote attackers to bypass authentication and execut…EPSS 5.8%7.5CVE-2026-42018JFrog Artifactory improper authentication leaks anonymous tokenJFrog Artifactory can return an internal anonymous-user token to an unauthenticated caller even when anonymous access is disabled. Because the token …KEVEPSS 9.8%analysed9.8CVE-2026-82329JFrog Artifactory improper authentication allows admin takeoverJFrog Artifactory contains an improper authentication weakness (CWE-287) that, under default configuration, may let an unauthenticated attacker with …KEVEPSS 14%analysed8.8CVE-2026-59822LiteLLM MCP endpoint auth bypass via OAuth2 passthrough fallbackLiteLLM's MCP Streamable HTTP endpoint, prior to 1.84.0, let an unauthenticated attacker send a fabricated Authorization header that triggered an OAu…KEVEPSS 0.84%analysed10.0CVE-2026-49869Kestra OSS auth bypass via path suffix match enables RCEKestra OSS AuthenticationFilter whitelists the public config endpoint using request.getPath().endsWith("/configs"), a suffix match instead of an exac…KEVEPSS 2.1%analysed

Source: NIST National Vulnerability Database (record CVE-2008-3703), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.