CVE-2011-0547
Multiple integer overflows in vxsvc.exe in the Veritas Enterprise Administrator service in Symantec Veritas Storage Foundation 5.1 and earlier, Veritas Storage Foundation Cluster File System (SFCFS) 5.1 and earlier, Veritas Storage Foundation Cluster File System Enterprise for Oracle RAC (SFCFSORAC) 5.1 and earlier, Veritas Dynamic Multi-Pathing (DMP) 5.1, and NetBackup PureDisk 6.5.x through 6.6.1.x allow remote attackers to execute arbitrary code via (1) a crafted Unicode string, related to the vxveautil.value_binary_unpack function; (2) a crafted ASCII string, related to the vxveautil.value_binary_unpack function; or (3) a crafted value, related to the vxveautil.kv_binary_unpack function, leading to a buffer overflow.
Key facts
- CVSS score
- 10.0 (v2.0)
- Severity
- HIGH
- CVSS vector
AV:N/AC:L/Au:N/C:C/I:C/A:C- Weakness (CWE)
- CWE-189
- EPSS score
- 6.6% (94th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2011-0565)
- Published
- August 19, 2011
- NVD last modified
- June 16, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2011-0565 in the EU Vulnerability Database. Last updated in EUVD on August 6, 2024.
View on the EU Vulnerability DatabaseAffected products
- symantec / netbackup puredisk
- symantec / netbackup puredisk
- symantec / netbackup puredisk
- symantec / netbackup puredisk
- symantec / netbackup puredisk
- symantec / netbackup puredisk
- symantec / netbackup puredisk
- symantec / veritas dynamic multi-pathing
- symantec / veritas storage foundation
- symantec / veritas storage foundation
- symantec / veritas storage foundation cluster file system for oracle rac
- symantec / veritas storage foundation cluster file system for oracle rac
References
- http://marc.info/?l=bugtraq&m=131955939603667&w=2
- http://www.securityfocus.com/bid/49014
- http://www.symantec.com/business/support/index?page=content&id=TECH165536(Patch, Vendor Advisory)
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110815_00
- http://zerodayinitiative.com/advisories/ZDI-11-262/
- http://zerodayinitiative.com/advisories/ZDI-11-263/
- http://zerodayinitiative.com/advisories/ZDI-11-264/
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14792
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain