$ cve CVE-2005-3566 JSON

CVE-2005-3566 EXPLOIT

4.3

MEDIUM · CVSS 2.0 · EPSS 1.2% (pctl 68)

Patch early

A public exploit exists.

Description

Buffer overflow in various ha commands of VERITAS Cluster Server for UNIX before 4.0MP2 allows local users to execute arbitrary code via a long VCSI18N_LANG environment variable to (1) haagent, (2) haalert, (3) haattr, (4) hacli, (5) hacli_runcmd, (6) haclus, (7) haconf, (8) hadebug, (9) hagrp, (10) hahb, (11) halog, (12) hareg, (13) hares, (14) hastatus, (15) hasys, (16) hatype, (17) hauser, and (18) tststew.

Scoring

CVSS	4.3 (MEDIUM, v2.0)
Vector	AV:L/AC:L/Au:S/C:P/I:P/A:P
EPSS	1.23% — more likely to be exploited than 68% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2005-11-16
Last modified	2026-06-16

Affected (4)

Vendor	Product
symantec veritas	cluster server
symantec veritas	sanpoint control quickstart
symantec veritas	storage foundation
symantec veritas	storage foundation cluster file system

Public exploits

Source	Title	Date
exploit-db	Veritas Storage Foundation 4.0 - VCSI18N_LANG Local Overflow	2005-11-12

References

→ the Explorer · watch your stack · NVD