CVE-2005-3116

28Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 28%

from disclosure to weapon59 days

Published on NVDNov 18

1st PoC+59d

exploitation probability

28%top 2% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Stack-based buffer overflow in a shared library as used by the Volume Manager daemon (vmd) in VERITAS NetBackup Enterprise Server 5.0 MP1 to MP5 and 5.1 up to MP3A allows remote attackers to execute arbitrary code via a crafted packet.

Affected products

n/a · n/a

public PoCs found — 1✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/1421

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://secunia.com/advisories/17503 http://securityresponse.symantec.com/avcenter/security/Content/2005.11.08b.html http://securitytracker.com/id?1015170 http://seer.support.veritas.com/docs/279553.htm https://exchange.xforce.ibmcloud.com/vulnerabilities/22985 http://www.idefense.com/application/poi/display?id=336&type=vulnerabilities http://www.kb.cert.org/vuls/id/574662 http://www.osvdb.org/20674 http://www.securityfocus.com/archive/1/422066/100/0/threaded http://www.securityfocus.com/archive/1/422157/100/0/threaded http://www.securityfocus.com/bid/15353 http://www.vupen.com/english/advisories/2005/2349