Unscored severity · published Dec 31, 2004
CVE-2004-2205
Unknown vulnerability in Veritas Cluster Server 1.0.1 through 4.0 allows local users to gain root access via unspecified vectors
–
CVSS
0.3%
EPSS
No
On KEV
Description
Unknown vulnerability in Veritas Cluster Server 1.0.1 through 4.0 allows local users to gain root access via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 28% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CS
Cluster Server · Symantec Veritas
1.0.1_solaris; 1.0.2_solaris; 1.1.1_solaris; 1.1.2_solaris; 1.1_solaris; 1.2_nt; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-2205
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-2205
Patch
http://secunia.com/advisories/12833
securitytracker.com
http://securitytracker.com/id?1011693
Patch
http://seer.support.veritas.com/docs/271040.htm
Patch
http://www.osvdb.org/10757
Patch
http://www.securityfocus.com/bid/11421
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/17719
More from Cluster Server
–
CVE-2005-3566
Buffer overflow in various ha commands of VERITAS Cluster Server for UNIX before 4.0MP2 allows local users to execute arbitrary code via a long VCSI18N_LANG environment variable…
–
CVE-2002-1817
Unknown vulnerability in Veritas Cluster Server (VCS) 1.2 for WindowsNT, Cluster Server 1.3.0 for Solaris, and Cluster Server 1.3.1 for HP-UX allows attackers to gain privileges…
–
CVE-2001-0287
VERITAS Cluster Server (VCS) 1.3.0 on Solaris allows local users to cause a denial of service (system panic) via the -L option to the lltstat command