CVE-2005-3566

Published: Nov 16, 2005Modified: Apr 16, 2026

4.3

Vector

AV:L/AC:L/Au:S/C:P/I:P/A:P

Exploitability: 3.1 / Impact: 6.4

Source: NVD

Description

Buffer overflow in various ha commands of VERITAS Cluster Server for UNIX before 4.0MP2 allows local users to execute arbitrary code via a long VCSI18N_LANG environment variable to (1) haagent, (2) haalert, (3) haattr, (4) hacli, (5) hacli_runcmd, (6) haclus, (7) haconf, (8) hadebug, (9) hagrp, (10) hahb, (11) halog, (12) hareg, (13) hares, (14) hastatus, (15) hasys, (16) hatype, (17) hauser, and (18) tststew.

Affected (40)

Products: Symantec Veritas: Cluster Server, Sanpoint Control Quickstart, Storage Foundation, Storage Foundation Cluster File System

Symantec Veritas

4 products

Cluster Server

Sanpoint Control Quickstart

Storage Foundation

Storage Foundation Cluster File System

Configuration A

40 vulnerable

Vulnerable Software	Affected Versions
Symantec Veritas Cluster Server	Version 2.2
Symantec Veritas Cluster Server	Version 2.2_linux
Symantec Veritas Cluster Server	Version 2.2_linux_mp1p1
Symantec Veritas Cluster Server	Version 2.2_mp1
Symantec Veritas Cluster Server	Version 2.2_mp2
Symantec Veritas Cluster Server	Version 3.5
Symantec Veritas Cluster Server	Version 3.5_aix
Symantec Veritas Cluster Server	Version 3.5_hp-ux
Symantec Veritas Cluster Server	Version 3.5_hp-ux_update_1
Symantec Veritas Cluster Server	Version 3.5_hp-ux_update_2
Symantec Veritas Cluster Server	Version 3.5_mp1
Symantec Veritas Cluster Server	Version 3.5_mp1j
Symantec Veritas Cluster Server	Version 3.5_mp2
Symantec Veritas Cluster Server	Version 3.5_p1
Symantec Veritas Cluster Server	Version 3.5_solaris
Symantec Veritas Cluster Server	Version 3.5_solaris_beta
Symantec Veritas Cluster Server	Version 3.5_solaris_mp1
Symantec Veritas Cluster Server	Version 3.5_solaris_mp2
Symantec Veritas Cluster Server	Version 3.5_solaris_mp3
Symantec Veritas Cluster Server	Version 4.0_aix
Symantec Veritas Cluster Server	Version 4.0_aix_beta
Symantec Veritas Cluster Server	Version 4.0_linux
Symantec Veritas Cluster Server	Version 4.0_linux_beta
Symantec Veritas Cluster Server	Version 4.0_solaris
Symantec Veritas Cluster Server	Version 4.0_solaris_beta
Symantec Veritas Cluster Server	Version 4.0_solaris_mp1
Symantec Veritas Sanpoint Control Quickstart	Version 3.5_solaris
Symantec Veritas Storage Foundation	Version 1.0_aix
Symantec Veritas Storage Foundation	Version 2.2_linux
Symantec Veritas Storage Foundation	Version 2.2_vmware_esx
Symantec Veritas Storage Foundation	Version 3.0_aix
Symantec Veritas Storage Foundation	Version 3.4_aix
Symantec Veritas Storage Foundation	Version 3.5_hp-ux
Symantec Veritas Storage Foundation	Version 3.5_solaris
Symantec Veritas Storage Foundation	Version 4.0_aix
Symantec Veritas Storage Foundation	Version 4.0_linux
Symantec Veritas Storage Foundation	Version 4.0_solaris
Symantec Veritas Storage Foundation Cluster File System	Version 4.0_aix
Symantec Veritas Storage Foundation Cluster File System	Version 4.0_linux
Symantec Veritas Storage Foundation Cluster File System	Version 4.0_solaris