CVE-2007-2279 json
The Scheduler Service (VxSchedService.exe) in Symantec Storage Foundation for Windows 5.0 allows remote attackers to bypass authentication…
published 2007-06-04 19 y ago modified 2026-06-16 4 mo ago also EUVD-2007-2274
- cvss
- 9.3
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 5.8%
- EPSS 5.8% chance of exploitation in 30 days, percentile 93%
- public exploits
- 0
- none known
Summary
The Scheduler Service (VxSchedService.exe) in Symantec Storage Foundation for Windows 5.0 allows remote attackers to bypass authentication and execute arbitrary code via certain requests to the service socket that create (1) PreScript or (2) PostScript registry values under Veritas\VxSvc\CurrentVersion\Schedules specifying future command execution.
Patch / fix
Exploit prediction
5.82% chance of exploitation in the next 30 days, higher than 93% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 9.3 | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Classification
- Weakness
-
- CWE-264 Permissions, Privileges, and Access Controls
References
-
symantec.com
/avcenter/security/Content/2007.06.01.html
patch, vendor-advisory
-
secunia.com
/advisories/25537
third-party-advisory, vendor-advisory
-
vupen.com
/english/advisories/2007/2035
vdb-entry, vendor-advisory
-
securityfocus.com
/archive/1/470562/100/0/threaded
mailing-list
-
securitytracker.com
/id?1018188
vdb-entry
- seer.entsupport.symantec.com /docs/288627.htm
-
osvdb.org
/36104
vdb-entry
-
securityfocus.com
/bid/24194
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/34680
vdb-entry
Sources
- CVE List CVE-2007-2279
- NVD CVE-2007-2279
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.