Vulnerabilities > CVE-2005-3566 - Local Buffer Overflow vulnerability in VERITAS Cluster Server for UNIX

CVSS 4.3 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

SINGLE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

local

low complexity

symantec-veritas

exploit available

NVD

Published: 2005-11-16

Updated: 2017-07-11

Summary

Buffer overflow in various ha commands of VERITAS Cluster Server for UNIX before 4.0MP2 allows local users to execute arbitrary code via a long VCSI18N_LANG environment variable to (1) haagent, (2) haalert, (3) haattr, (4) hacli, (5) hacli_runcmd, (6) haclus, (7) haconf, (8) hadebug, (9) hagrp, (10) hahb, (11) halog, (12) hareg, (13) hares, (14) hastatus, (15) hasys, (16) hatype, (17) hauser, and (18) tststew.

Vulnerable Configurations

Part	Description	Count
Application	Symantec_Veritas Symantec Veritas Cluster Server 2.2 Symantec Veritas Cluster Server 2.2_Linux Symantec Veritas Cluster Server 2.2_Linux_Mp1P1 Symantec Veritas Cluster Server 2.2_Mp1 Symantec Veritas Cluster Server 2.2_Mp2 Symantec Veritas Cluster Server 3.5 Symantec Veritas Cluster Server 3.5_Aix Symantec Veritas Cluster Server 3.5_Hp-Ux Symantec Veritas Cluster Server 3.5_Hp-Ux_Update_1 Symantec Veritas Cluster Server 3.5_Hp-Ux_Update_2 Symantec Veritas Cluster Server 3.5_Mp1 Symantec Veritas Cluster Server 3.5_Mp1J Symantec Veritas Cluster Server 3.5_Mp2 Symantec Veritas Cluster Server 3.5_P1 Symantec Veritas Cluster Server 3.5_Solaris Symantec Veritas Cluster Server 3.5_Solaris_Beta Symantec Veritas Cluster Server 3.5_Solaris_Mp1 Symantec Veritas Cluster Server 3.5_Solaris_Mp2 Symantec Veritas Cluster Server 3.5_Solaris_Mp3 Symantec Veritas Cluster Server 4.0_Aix Symantec Veritas Cluster Server 4.0_Aix_Beta Symantec Veritas Cluster Server 4.0_Linux Symantec Veritas Cluster Server 4.0_Linux_Beta Symantec Veritas Cluster Server 4.0_Solaris Symantec Veritas Cluster Server 4.0_Solaris_Beta Symantec Veritas Cluster Server 4.0_Solaris_Mp1 Symantec Veritas Sanpoint Control Quickstart 3.5_Solaris Symantec Veritas Storage Foundation 1.0_Aix Symantec Veritas Storage Foundation 2.2_Linux Symantec Veritas Storage Foundation 2.2_Vmware_Esx Symantec Veritas Storage Foundation 3.0_Aix Symantec Veritas Storage Foundation 3.4_Aix Symantec Veritas Storage Foundation 3.5_Hp-Ux Symantec Veritas Storage Foundation 3.5_Solaris Symantec Veritas Storage Foundation 4.0_Aix Symantec Veritas Storage Foundation 4.0_Linux Symantec Veritas Storage Foundation 4.0_Solaris Symantec Veritas Storage Foundation Cluster File System 4.0_Aix Symantec Veritas Storage Foundation Cluster File System 4.0_Linux Symantec Veritas Storage Foundation Cluster File System 4.0_Solaris	40

Exploit-Db

description	Veritas Storage Foundation 4.0 VCSI18N_LANG Local Overflow Exploit. CVE-2005-3566. Local exploit for linux platform
id	EDB-ID:1316
last seen	2016-01-31
modified	2005-11-12
published	2005-11-12
reporter	Kevin Finisterre
source	https://www.exploit-db.com/download/1316/
title	Veritas Storage Foundation 4.0 VCSI18N_LANG Local Overflow Exploit

Summary

Vulnerable Configurations

Exploit-Db

References