An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24339. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized.

TrustedSec Blog


Get up-to-date insights and the scoop on new tools and tricks to help you improve your security program.

Listed: