4.3

CVE-2005-3566: symantec_veritas cluster_server

CVSS: 4.3v2.0MediumModified
Published 16-11-2005Last modified 07-08-2024
Open JSON

Vulnerability summary

CVE-2005-3566 is a medium (CVSS 4.3) vulnerability in symantec_veritas cluster_server. EPSS estimates a 1.23% chance of exploitation in the next 30 days, higher than 68.7% of scored vulnerabilities. 2 public exploits are recorded.

Overall risk
27/100
0100
Medium · default modelHow is this calculated?
CVSS score
4.3/10
010
Medium · v2.0 (NVD)
EPSS score
1.23%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits2reference, exploit-database

Timeline

  1. 16-11-2005
    PublishedVulnerability first disclosed.
  2. 07-08-2024
    Last modifiedVulnerability information updated.

Description

Buffer overflow in various ha commands of VERITAS Cluster Server for UNIX before 4.0MP2 allows local users to execute arbitrary code via a long VCSI18N_LANG environment variable to (1) haagent, (2) haalert, (3) haattr, (4) hacli, (5) hacli_runcmd, (6) haclus, (7) haconf, (8) hadebug, (9) hagrp, (10) hahb, (11) halog, (12) hareg, (13) hares, (14) hastatus, (15) hasys, (16) hatype, (17) hauser, and (18) tststew.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

1.23%

Chance of exploitation in the next 30 days

Percentile

69%

Versus all other CVEs

30-day change

0.00 pp

From 1.23% on 21-09-2026

21-09-202621-10-2026
EPSS score
1.23%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found
  • referenceUnverified

    Exploit Reference (securityfocus.com)

    Maturity: unknown

  • exploit-databaselocallinuxVerified

    Veritas Storage Foundation 4.0 - VCSI18N_LANG Local Overflow

    Maturity: weaponized

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Symantec_veritas4 products
  • cluster_server2.2 | 2.2_linux | 2.2_linux_mp1p1 | 2.2_mp1 | 2.2_mp2 | 3.5 | 3.5_aix | 3.5_hp-ux | 3.5_hp-ux_update_1 | 3.5_hp-ux_update_2 | 3.5_mp1 | 3.5_mp1j | 3.5_mp2 | 3.5_p1 | 3.5_solaris | 3.5_solaris_beta | 3.5_solaris_mp1 | 3.5_solaris_mp2 | 3.5_solaris_mp3 | 4.0_aix | 4.0_aix_beta | 4.0_linux | 4.0_linux_beta | 4.0_solaris | 4.0_solaris_beta | 4.0_solaris_mp1
  • sanpoint_control_quickstart3.5_solaris
  • storage_foundation1.0_aix | 2.2_linux | 2.2_vmware_esx | 3.0_aix | 3.4_aix | 3.5_hp-ux | 3.5_solaris | 4.0_aix | 4.0_linux | 4.0_solaris
  • storage_foundation_cluster_file_system4.0_aix | 4.0_linux | 4.0_solaris

1 vendor · 4 products

References

9 links