← back
CVE-2005-3566

CVE-2005-3566

EPSS 1.2%
Buffer overflow in various ha commands of VERITAS Cluster Server for UNIX before 4.0MP2 allows local users to execute arbitrary code via a long VCSI18N_LANG environment variable to (1) haagent, (2) haalert, (3) haattr, (4) hacli, (5) hacli_runcmd, (6) haclus, (7) haconf, (8) hadebug, (9) hagrp, (10) hahb, (11) halog, (12) hareg, (13) hares, (14) hastatus, (15) hasys, (16) hatype, (17) hauser, and (18) tststew.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/1316unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://marc.info/?l=bugtraq&m=113199516516880&w=2http://osvdb.org/20673http://secunia.com/advisories/17502http://securityreason.com/securityalert/174http://securityresponse.symantec.com/avcenter/security/Content/2005.11.08a.htmlhttp://securitytracker.com/id?1015169https://exchange.xforce.ibmcloud.com/vulnerabilities/22986http://www.securityfocus.com/bid/15349http://www.vupen.com/english/advisories/2005/2350