Vulnerability Intelligence Report
CVE-2005-3566
Buffer overflow in various ha commands of VERITAS Cluster Server for UNIX before 4.0MP2 allows local users to execute arbitrary code via a long VCSI18N_LANG environment variable to (1) haagent, (2) haalert, (3) haattr, (4) hacli, (5) hacli_runcmd, (6) haclus, (7) haconf, (8) hadebug, (9) hagrp, (10) hahb, (11) halog, (12) hareg, (13) hares, (14) hastatus, (15) hasys, (16) hatype, (17) hauser, and (18) tststew.
No Active Exploit Signals
CVSS Base Score
4.3
MEDIUM
EPSS Probability:1.23%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| symantec_veritas | cluster_server | 2.2, 2.2_linux, 2.2_linux_mp1p1, 2.2_mp1, 2.2_mp2, 3.5, 3.5_aix, 3.5_hp-ux, 3.5_hp-ux_update_1, 3.5_hp-ux_update_2, 3.5_mp1, 3.5_mp1j, 3.5_mp2, 3.5_p1, 3.5_solaris, 3.5_solaris_beta, 3.5_solaris_mp1, 3.5_solaris_mp2, 3.5_solaris_mp3, 4.0_aix, 4.0_aix_beta, 4.0_linux, 4.0_linux_beta, 4.0_solaris, 4.0_solaris_beta, 4.0_solaris_mp1 |
| symantec_veritas | sanpoint_control_quickstart | 3.5_solaris |
| symantec_veritas | storage_foundation | 1.0_aix, 2.2_linux, 2.2_vmware_esx, 3.0_aix, 3.4_aix, 3.5_hp-ux, 3.5_solaris, 4.0_aix, 4.0_linux, 4.0_solaris |
| symantec_veritas | storage_foundation_cluster_file_system | 4.0_aix, 4.0_linux, 4.0_solaris |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
1.232%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | MITRE Corporation · N/A · USA |
| Reserved | 2005-11-16T00:00:00 |
| Published | 2005-11-16T07:37:00 |
| Patch Date | 2005-11-09 |
| Last Updated | 2024-08-07T23:17:23 |
Community Chatter & Buzz