CVE:CVE-2009-3027
CNNVD:CNNVD-200912-164
Symantec Veritas是Symantec的备份系列产品家族。 
Symantec Veritas产品VRTSweb组件存在远程代码执行漏洞。由于VRTSweb组件的VRTSweb.exe没有正确处理认证请求，远程攻击者可以通过向TCP端口14300发送特制的数据，导致解压WAR文件并执行任意代码。
solution:Upgrade symantec backup_exec_continuous_protection_server to a higher version than 11d,12.0,12.5,and avoid the version 11d,12.0,12.5; Upgrade symantec veritas_application_director to a higher version than 1.1,and avoid the version 1.1; Upgrade symantec veritas_backup_exec to a higher version than 11d,12.0,12.5,and avoid the version 11d,12.0,12.5; Upgrade symantec veritas_cluster_server to a higher version than 3.5,4.0,4.1,5.0,and avoid the version 3.5,4.0,4.1,5.0; Upgrade symantec veritas_cluster_server_management_console to a higher version than 5.1,5.5,5.5.1,and avoid the version 5.1,5.5,5.5.1; Upgrade symantec veritas_cluster_server_one to a higher version than 2.0,2.0.1,2.0.2,and avoid the version 2.0,2.0.1,2.0.2; Upgrade symantec veritas_command_central_enterprise_reporter to a higher version than 5.0_ga,5.0mp1,5.0mp1rp1,5.1,and avoid the version 5.0_ga,5.0mp1,5.0mp1rp1,5.1; Upgrade symantec veritas_command_central_storage to a higher version than 4.x,5.0,5.1,and avoid the version 4.x,5.0,5.1; Upgrade symantec veritas_command_central_storage_change_manager to a higher version than 5.0,5.1,and avoid the version 5.0,5.1; Upgrade symantec veritas_micromeasure to a higher version than 5.0,and avoid the version 5.0; Upgrade symantec veritas_netbackup_operations_manager to a higher version than 6.0_ga,6.5.5,and avoid the version 6.0_ga,6.5.5; Upgrade symantec veritas_netbackup_reporter to a higher version than 6.0_ga,6.6,and avoid the version 6.0_ga,6.6; Upgrade symantec veritas_storae_foundation to a higher version than 3.5_onwards,and avoid the version 3.5_onwards; Upgrade symantec veritas_storage_foundation to a higher version than 3.5,and avoid the version 3.5; Upgrade symantec veritas_storage_foundation_cluster_file_system to a higher version than 3.5,4.0,4.1,5.0,and avoid the version 3.5,4.0,4.1,5.0; Upgrade symantec veritas_storage_foundation_cluster_file_system_for_oracle_rac to a higher version than 5.0,and avoid the version 5.0; Upgrade symantec veritas_storage_foundation_for_db2 to a higher version than 4.1,5.0,and avoid the version 4.1,5.0; Upgrade symantec veritas_storage_foundation_for_high_availability to a higher version than 3.5,and avoid the version 3.5; Upgrade symantec veritas_storage_foundation_for_oracle to a higher version than 4.1,5.0,5.0.1,and avoid the version 4.1,5.0,5.0.1; Upgrade symantec veritas_storage_foundation_for_oracle_real_application_cluster to a higher version than 3.5,4.0,4.1,4.1:hp-ux,5.0,and avoid the version 3.5,4.0,4.1,4.1:hp-ux,5.0; Upgrade symantec veritas_storage_foundation_for_sybase to a higher version than 4.1,5.0,and avoid the version 4.1,5.0; Upgrade symantec veritas_storage_foundation_for_windows_high_availability to a higher version than 4.3mp2,5.0,5.0rp1a,5.0rp2,5.1,5.1ap1,and avoid the version 4.3mp2,5.0,5.0rp1a,5.0rp2,5.1,5.1ap1; Upgrade symantec veritas_storage_foundation_manager to a higher version than 1.0,1.0mp1,1.1,1.1.1ux,1.1.1win,2.0,and avoid the version 1.0,1.0mp1,1.1,1.1.1ux,1.1.1win,2.0