Vulnerability Description
Buffer overflow in various ha commands of VERITAS Cluster Server for UNIX before 4.0MP2 allows local users to execute arbitrary code via a long VCSI18N_LANG environment variable to (1) haagent, (2) haalert, (3) haattr, (4) hacli, (5) hacli_runcmd, (6) haclus, (7) haconf, (8) hadebug, (9) hagrp, (10) hahb, (11) halog, (12) hareg, (13) hares, (14) hastatus, (15) hasys, (16) hatype, (17) hauser, and (18) tststew.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Symantec Veritas | Cluster Server | 2.2 |
| Symantec Veritas | Sanpoint Control Quickstart | 3.5_solaris |
| Symantec Veritas | Storage Foundation | 1.0_aix |
| Symantec Veritas | Storage Foundation Cluster File System | 4.0_aix |
References
- http://marc.info/?l=bugtraq&m=113199516516880&w=2
- http://osvdb.org/20673
- http://secunia.com/advisories/17502PatchVendor Advisory
- http://securityreason.com/securityalert/174
- http://securityresponse.symantec.com/avcenter/security/Content/2005.11.08a.htmlPatchVendor Advisory
- http://securitytracker.com/id?1015169Patch
- http://www.securityfocus.com/bid/15349Exploit
- http://www.vupen.com/english/advisories/2005/2350
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22986
- http://marc.info/?l=bugtraq&m=113199516516880&w=2
- http://osvdb.org/20673
- http://secunia.com/advisories/17502PatchVendor Advisory
- http://securityreason.com/securityalert/174
- http://securityresponse.symantec.com/avcenter/security/Content/2005.11.08a.htmlPatchVendor Advisory
- http://securitytracker.com/id?1015169Patch
FAQ
What is CVE-2005-3566?
CVE-2005-3566 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Buffer overflow in various ha commands of VERITAS Cluster Server for UNIX before 4.0MP2 allows local users to execute arbitrary code via a long VCSI18N_LANG environment variable to (1) haagent, (2) ha...
How severe is CVE-2005-3566?
CVE-2005-3566 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2005-3566?
Check the references section above for vendor advisories and patch information. Affected products include: Symantec Veritas Cluster Server, Symantec Veritas Sanpoint Control Quickstart, Symantec Veritas Storage Foundation, Symantec Veritas Storage Foundation Cluster File System.