What is CVE-2008-3703?

CVE-2008-3703 is a vulnerability in Symantec Veritas Storage Foundation, classified under Improper Authentication. Published 2008-08-18.

Is CVE-2008-3703 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Auth bypass in Symantec Veritas Storage Foundation

CVE-2008-3703

The management console in the Volume Manager Scheduler Service (aka VxSchedService.exe) in Symantec Veritas Storage Foundation for Windows (SFW) 5.0, 5.0 RP1a, and 5.1 accepts NULL NTLMSSP authentication, which allows remote attackers to execute arbitrary code via requests to the service socket that create "snapshots schedules" registry values specifying future command execution. NOTE: this issue exists because of an incomplete fix for CVE-2007-2279.

Vulnerability class: Broken Authentication

Published 2008-08-18 · last modified 2026-06-16.

CVSS v2 metric

CVSS v2 base score 10.0 (High). Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C. This CVE predates CVSS v3 and has no v3 score from NVD.

EPSS exploit prediction

EPSS: 0.122 (96.0th percentile), scored 2026-09-29.

Moderate probability of exploitation in the next 30 days — watch for active exploitation reports. 96th percentile — 96.0% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.122 · newest: 0.122 · change: 0.000

Affected products

Symantec Veritas Storage Foundation — versions 5.0, 5.1

Weakness classification (CWE)

CWE-287 — Improper Authentication

Public proof-of-concept exploits

ARPSyndicate/cve-scores

References

secunia.com/advisories/31486 (Vendor Advisory, third-party-advisory)
www.securityfocus.com/archive/1/495481 (mailing-list)
www.zerodayinitiative.com/advisories/ZDI-08-053/
www.symantec.com/avcenter/security/Content/2008.08.14a.html
www.securityfocus.com/bid/30596 (vdb-entry)
www.vupen.com/english/advisories/2008/2395 (vdb-entry)
seer.entsupport.symantec.com/docs/306386.htm (Patch)
exchange.xforce.ibmcloud.com/vulnerabilities/44466 (vdb-entry)
securityreason.com/securityalert/4161 (third-party-advisory)
www.securityfocus.com/archive/1/495487/100/0/threaded (mailing-list)

Frequently asked questions

What is CVE-2008-3703?: CVE-2008-3703 is a vulnerability in Symantec Veritas Storage Foundation, classified under Improper Authentication. Published 2008-08-18.
Is CVE-2008-3703 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.