CVE-2005-3116: symantec_veritas netbackup
Vulnerability summary
CVE-2005-3116 is a high (CVSS 10.0) vulnerability in symantec_veritas netbackup. EPSS estimates a 27.62% chance of exploitation in the next 30 days, higher than 98% of scored vulnerabilities. 3 public exploits are recorded.
Timeline
- 18-11-2005PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Stack-based buffer overflow in a shared library as used by the Volume Manager daemon (vmd) in VERITAS NetBackup Enterprise Server 5.0 MP1 to MP5 and 5.1 up to MP3A allows remote attackers to execute arbitrary code via a crafted packet.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
27.62%
Chance of exploitation in the next 30 days
Percentile
98%
Versus all other CVEs
30-day change
0.00 pp
From 27.62% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
3 foundExploit Reference (securityfocus.com)
Maturity: unknown
Exploit Reference (securityfocus.com)
Maturity: unknown
Veritas NetBackup 4/5 - Volume Manager Daemon Remote Buffer Overflow
Maturity: weaponized
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Symantec_veritas1 product
- netbackup5.0_with_mp1 | 5.0_with_mp2 | 5.0_with_mp3 | 5.0_with_mp4 | 5.0_with_mp5 | 5.1_with_mp1 | 5.1_with_mp2 | 5.1_with_mp3a | 5.1_without_mp
1 vendor · 1 product
References
12 links- www.securityfocus.com/archive/1/422066/100/0/threadedMailing ListX Refsource BUGTRAQExploitVendor Advisory
- www.idefense.com/application/poi/display?id=336&type=vulnerabilitiesThird Party AdvisoryX Refsource IDEFENSEPatch
- www.securityfocus.com/archive/1/422157/100/0/threadedMailing ListX Refsource BUGTRAQExploitVendor Advisory