NetSight
IP …
medium4.3Public exploit code

CVE-2005-3566

Buffer overflow in various ha commands of VERITAS Cluster Server for UNIX before 4.0MP2 allows local users to execute arbitrary code via a long VCSI18N_LANG en…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Buffer overflow in various ha commands of VERITAS Cluster Server for UNIX before 4.0MP2 allows local users to execute arbitrary code via a long VCSI18N_LANG environment variable to (1) haagent, (2) haalert, (3) haattr, (4) hacli, (5) hacli_runcmd, (6) haclus, (7) haconf, (8) hadebug, (9) hagrp, (10) hahb, (11) halog, (12) hareg, (13) hares, (14) hastatus, (15) hasys, (16) hatype, (17) hauser, and (18) tststew.

Affected products

VendorProductAffected versions
Symantec VeritasCluster Server
Versions 2.2, 2.2_linux, 2.2_linux_mp1p1, 2.2_mp1, 2.2_mp2, 3.5
Symantec VeritasSanpoint Control Quickstart
Version 3.5_solaris
Symantec VeritasStorage Foundation
Versions 1.0_aix, 2.2_linux, 2.2_vmware_esx, 3.0_aix, 3.4_aix, 3.5_hp-ux
Symantec VeritasStorage Foundation Cluster File System
Versions 4.0_aix, 4.0_linux, 4.0_solaris

References