CVE-2005-3566 - CVE House
Back to Database
Status published Medium CVE-2005-3566

Buffer overflow in various ha commands of VERITAS Cluster Server...

Vulnerability Description

Buffer overflow in various ha commands of VERITAS Cluster Server for UNIX before 4.0MP2 allows local users to execute arbitrary code via a long VCSI18N_LANG environment variable to (1) haagent, (2) haalert, (3) haattr, (4) hacli, (5) hacli_runcmd, (6) haclus, (7) haconf, (8) hadebug, (9) hagrp, (10) hahb, (11) halog, (12) hareg, (13) hares, (14) hastatus, (15) hasys, (16) hatype, (17) hauser, and (18) tststew.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-3566

Credits & Attribution

No credits recorded in the NVD database.

References

More from symantec veritas

View All →
CVE-2007-4516
The Volume Manager Scheduler Service (aka VxSchedService.exe) in Symantec Veritas...
Medium 4.3
CVE-2006-4228
Symantec Veritas NetBackup PureDisk Remote Office Edition 6.0 before MP1...
Critical 9
CVE-2006-4128
Multiple heap-based buffer overflows in Symantec VERITAS Backup Exec for...
Medium 6.5
CVE-2006-1298
Format string vulnerability in the Job Engine service (bengine.exe) in...
Medium 4.6
CVE-2006-1297
Unspecified vulnerability in Veritas Backup Exec for Windows Server Remote...
Medium 5

Affected Vendor

symantec veritas

View all reports →

Affected Software

cluster server, sanpoint control quickstart, storage foundation, storage foundation cluster file system
Vulnerable Versions:
2.2, 2.2_linux, 2.2_linux_mp1p1, 2.2_mp1, 2.2_mp2, 3.5, 3.5_aix, 3.5_hp-ux, 3.5_hp-ux_update_1, 3.5_hp-ux_update_2, 3.5_mp1, 3.5_mp1j, 3.5_mp2, 3.5_p1, 3.5_solaris, 3.5_solaris_beta, 3.5_solaris_mp1, 3.5_solaris_mp2, 3.5_solaris_mp3, 4.0_aix, 4.0_aix_beta, 4.0_linux, 4.0_linux_beta, 4.0_solaris, 4.0_solaris_beta, 4.0_solaris_mp1, 1.0_aix, 2.2_vmware_esx, 3.0_aix, 3.4_aix

Timeline

Official Publish: November 16th, 2005
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.