CVE-2005-3116

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Stack-based buffer overflow in a shared library as used by the Volume Manager daemon (vmd) in VERITAS NetBackup Enterprise Server 5.0 MP1 to MP5 and 5.1 up to MP3A allows remote attackers to execute arbitrary code via a crafted packet.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/17503Patch, Vendor Advisory
http://securityresponse.symantec.com/avcenter/security/Content/2005.11.08b.htmlPatch
http://securitytracker.com/id?1015170Patch
http://seer.support.veritas.com/docs/279553.htmPatch, Vendor Advisory
http://www.idefense.com/application/poi/display?id=336&type=vulnerabilitiesPatch
http://www.kb.cert.org/vuls/id/574662Patch, US Government Resource
http://www.osvdb.org/20674Patch
http://www.securityfocus.com/archive/1/422066/100/0/threadedExploit, Vendor Advisory
http://www.securityfocus.com/archive/1/422157/100/0/threadedExploit, Vendor Advisory
http://www.securityfocus.com/bid/15353Patch
http://www.vupen.com/english/advisories/2005/2349
https://exchange.xforce.ibmcloud.com/vulnerabilities/22985
http://secunia.com/advisories/17503Patch, Vendor Advisory
http://securityresponse.symantec.com/avcenter/security/Content/2005.11.08b.htmlPatch
http://securitytracker.com/id?1015170Patch
http://seer.support.veritas.com/docs/279553.htmPatch, Vendor Advisory
http://www.idefense.com/application/poi/display?id=336&type=vulnerabilitiesPatch
http://www.kb.cert.org/vuls/id/574662Patch, US Government Resource
http://www.osvdb.org/20674Patch
http://www.securityfocus.com/archive/1/422066/100/0/threadedExploit, Vendor Advisory
http://www.securityfocus.com/archive/1/422157/100/0/threadedExploit, Vendor Advisory
http://www.securityfocus.com/bid/15353Patch
http://www.vupen.com/english/advisories/2005/2349
https://exchange.xforce.ibmcloud.com/vulnerabilities/22985

Timeline

Published: Nov 18, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-31187.5Mason before 1.0.0 does not install the init script after the user uses Mason to configure a firewall, which causes the system to run withou CVE-2005-31192.1Memory leak in the request_key_auth_destroy function in request_key_auth in Linux kernel 2.6.10 up to 2.6.13 allows local users to cause a d CVE-2005-31209.8Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certai CVE-2005-31212.1A rule file in module-assistant before 0.9.10 causes a temporary file to be created insecurely, which allows local users to conduct unauthor CVE-2005-31235.0Directory traversal vulnerability in GNUMP3D before 2.9.6 allows remote attackers to read arbitrary files via crafted sequences such as "/./CVE-2005-31242.1syslogtocern in Acme thttpd before 2.23 allows local users to write arbitrary files via a symlink attack on a temporary file.CVE-2005-31261.9The (1) kantiword (kantiword.sh) and (2) gantiword (gantiword.sh) scripts in antiword 0.35 and earlier allow local users to overwrite arbitr CVE-2005-31274.3Cross-site scripting (XSS) vulnerability in index.php in lucidCMS 1.0.11 allows remote attackers to inject arbitrary web script or HTML via CVE-2005-31284.3Cross-site scripting (XSS) vulnerability in add.php in Address Add Plugin 1.9 and 2.0 for Squirrelmail allows remote attackers to inject arb CVE-2005-31295.1Cross-site request forgery (CSRF) vulnerability in Serendipity 0.8.4 and earlier allows remote attackers to perform unauthorized actions as CVE-2005-31307.5SQL injection vulnerability in lucidCMS 1.0.11 allows remote attackers to execute arbitrary SQL commands via the login field.CVE-2005-31314.3Multiple cross-site scripting (XSS) vulnerabilities in MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions,