Unscored severity · published Nov 16, 2005
CVE-2005-3566
Buffer overflow in various ha commands of VERITAS Cluster Server for UNIX before 4.0MP2 allows local users to execute arbitrary code via a long VCSI18N_LANG environment variable…
–
CVSS
1.2%
EPSS
No
On KEV
Description
Buffer overflow in various ha commands of VERITAS Cluster Server for UNIX before 4.0MP2 allows local users to execute arbitrary code via a long VCSI18N_LANG environment variable to (1) haagent, (2) haalert, (3) haattr, (4) hacli, (5) hacli_runcmd, (6) haclus, (7) haconf, (8) hadebug, (9) hagrp, (10) hahb, (11) halog, (12) hareg, (13) hares, (14) hastatus, (15) hasys, (16) hatype, (17) hauser, and (18) tststew.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 69% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CS
Cluster Server · Symantec Veritas
2.2; 2.2_linux; 2.2_linux_mp1p1; 2.2_mp1; 2.2_mp2; 3.5; +20 more · source: NVD
SC
Sanpoint Control Quickstart · Symantec Veritas
3.5_solaris · source: NVD
SF
Storage Foundation · Symantec Veritas
1.0_aix; 2.2_linux; 2.2_vmware_esx; 3.0_aix; 3.4_aix; 3.5_hp-ux; +4 more · source: NVD
SF
Storage Foundation Cluster File System · Symantec Veritas
4.0_aix; 4.0_linux; 4.0_solaris · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-3566
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-3566
marc.info
http://marc.info/?l=bugtraq&m=113199516516880&w=2
osvdb.org
http://osvdb.org/20673
Patch
http://secunia.com/advisories/17502
securityreason.com
http://securityreason.com/securityalert/174
Patch
http://securityresponse.symantec.com/avcenter/security/Content/2005.11.08a.html
Patch
http://securitytracker.com/id?1015169
More from Cluster Server
–
CVE-2004-2205
Unknown vulnerability in Veritas Cluster Server 1.0.1 through 4.0 allows local users to gain root access via unspecified vectors
–
CVE-2002-1817
Unknown vulnerability in Veritas Cluster Server (VCS) 1.2 for WindowsNT, Cluster Server 1.3.0 for Solaris, and Cluster Server 1.3.1 for HP-UX allows attackers to gain privileges…
–
CVE-2001-0287
VERITAS Cluster Server (VCS) 1.3.0 on Solaris allows local users to cause a denial of service (system panic) via the -L option to the lltstat command