Back to Database
Status published
Critical
CVE-2005-3116
Stack-based buffer overflow in a shared library as used by...
Vulnerability Description
Stack-based buffer overflow in a shared library as used by the Volume Manager daemon (vmd) in VERITAS NetBackup Enterprise Server 5.0 MP1 to MP5 and 5.1 up to MP3A allows remote attackers to execute arbitrary code via a crafted packet.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-3116
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.kb.cert.org/vuls/id/574662
- http://www.osvdb.org/20674
- http://www.securityfocus.com/archive/1/422066/100/0/threaded
- http://www.securityfocus.com/bid/15353
- http://www.idefense.com/application/poi/display?id=336&type=vulnerabilities
- http://securitytracker.com/id?1015170
- http://secunia.com/advisories/17503
- http://securityresponse.symantec.com/avcenter/security/Content/2005.11.08b.html
- http://www.securityfocus.com/archive/1/422157/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22985
- http://www.vupen.com/english/advisories/2005/2349
- http://seer.support.veritas.com/docs/279553.htm
More from symantec veritas
View All →CVE-2007-4516
The Volume Manager Scheduler Service (aka VxSchedService.exe) in Symantec Veritas...
Medium
4.3
CVE-2006-4228
Symantec Veritas NetBackup PureDisk Remote Office Edition 6.0 before MP1...
Critical
9
CVE-2006-4128
Multiple heap-based buffer overflows in Symantec VERITAS Backup Exec for...
Medium
6.5
CVE-2006-1298
Format string vulnerability in the Job Engine service (bengine.exe) in...
Medium
4.6
CVE-2006-1297
Unspecified vulnerability in Veritas Backup Exec for Windows Server Remote...
Medium
5
Affected Vendor
symantec veritas
View all reports →Affected Software
netbackup
Vulnerable Versions:
5.0_with_mp1, 5.0_with_mp2, 5.0_with_mp3, 5.0_with_mp4, 5.0_with_mp5, 5.1_with_mp1, 5.1_with_mp2, 5.1_with_mp3a, 5.1_without_mp
Timeline
Official Publish:
November 18th, 2005
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.