Buffer overflow in various ha commands of VERITAS Cluster Server for UNIX before 4.0MP2 allows local users to execute arbitrary code via a long VCSI18N_LANG environment variable to (1) haagent, (2) haalert, (3) haattr, (4) hacli, (5) hacli_runcmd, (6) haclus, (7) haconf, (8) hadebug, (9) hagrp, (10) hahb, (11) halog, (12) hareg, (13) hares, (14) hastatus, (15) hasys, (16) hatype, (17) hauser, and (18) tststew.
结论预警: CVE-2005-3566 综合评估为存在公开利用（55.8/100）：CVSS 技术影响为中级，利用概率（EPSS 1.23%） 核心证据: 已收录 2 条公开利用参考（Exploit-DB）。 强制指令: 存在公开利用—请排查暴露面、落实缓解措施并优先修补。
风险随态势动态变化；本站持续评估并同步更新本页展示内容。
| EDB-ID | 来源 | 类型 | 公开时间 | 链接 |
|---|---|---|---|---|
| 1316 | exploit_db | edb | 2005-11-12 | Exploit-DB ↗ |
| — | nvd_ref | exploit_tag | Exploit-DB ↗ |
EPSS 日更估计相对被利用可能性；百分位表示该 CVE 在已评分漏洞中的相对排名（越高表示相对更严重）。
| # | 日期 | 旧 EPSS 分数 | 新 EPSS 分数 | 变化（新 − 旧） |
|---|---|---|---|---|
| 1 | 2026-06-15 | 0.34% | 1.23% | +0.90% |
| 2 | 2025-03-30 | 0.41% | 0.34% | -0.08% |
| 3 | 2025-03-29 | — | 0.41% | — |
完整 EPSS 历史 （共 6 条）
该 CVE 的 CVSS 指标。
| 底座分 | 版本 | 严重度 | 向量 | 可利用性 | 影响 | 分数来源 |
|---|---|---|---|---|---|---|
| 4.3 | 2.0 | MEDIUM |
|
3.1 | 6.4 | [email protected] |
| 厂商 | 产品 | 版本 | 原始 CPE |
|---|---|---|---|
| symantec_veritas | cluster_server | 2.2 | cpe:2.3:a:symantec_veritas:cluster_server:2.2:*:*:*:*:*:*:* |
| symantec_veritas | cluster_server | 2.2_linux | cpe:2.3:a:symantec_veritas:cluster_server:2.2_linux:*:*:*:*:*:*:* |
| symantec_veritas | cluster_server | 2.2_linux_mp1p1 | cpe:2.3:a:symantec_veritas:cluster_server:2.2_linux_mp1p1:*:*:*:*:*:*:* |
| symantec_veritas | cluster_server | 2.2_mp1 | cpe:2.3:a:symantec_veritas:cluster_server:2.2_mp1:*:*:*:*:*:*:* |
| symantec_veritas | cluster_server | 2.2_mp2 | cpe:2.3:a:symantec_veritas:cluster_server:2.2_mp2:*:*:*:*:*:*:* |
| symantec_veritas | cluster_server | 3.5 | cpe:2.3:a:symantec_veritas:cluster_server:3.5:*:*:*:*:*:*:* |
| symantec_veritas | cluster_server | 3.5_aix | cpe:2.3:a:symantec_veritas:cluster_server:3.5_aix:*:*:*:*:*:*:* |
| symantec_veritas | cluster_server | 3.5_hp-ux | cpe:2.3:a:symantec_veritas:cluster_server:3.5_hp-ux:*:*:*:*:*:*:* |
| symantec_veritas | cluster_server | 3.5_hp-ux_update_1 | cpe:2.3:a:symantec_veritas:cluster_server:3.5_hp-ux_update_1:*:*:*:*:*:*:* |
| symantec_veritas | cluster_server | 3.5_hp-ux_update_2 | cpe:2.3:a:symantec_veritas:cluster_server:3.5_hp-ux_update_2:*:*:*:*:*:*:* |
| symantec_veritas | cluster_server | 3.5_mp1 | cpe:2.3:a:symantec_veritas:cluster_server:3.5_mp1:*:*:*:*:*:*:* |
| symantec_veritas | cluster_server | 3.5_mp1j | cpe:2.3:a:symantec_veritas:cluster_server:3.5_mp1j:*:*:*:*:*:*:* |
| symantec_veritas | cluster_server | 3.5_mp2 | cpe:2.3:a:symantec_veritas:cluster_server:3.5_mp2:*:*:*:*:*:*:* |
| symantec_veritas | cluster_server | 3.5_p1 | cpe:2.3:a:symantec_veritas:cluster_server:3.5_p1:*:*:*:*:*:*:* |
| symantec_veritas | cluster_server | 3.5_solaris | cpe:2.3:a:symantec_veritas:cluster_server:3.5_solaris:*:*:*:*:*:*:* |
| symantec_veritas | cluster_server | 3.5_solaris_beta | cpe:2.3:a:symantec_veritas:cluster_server:3.5_solaris_beta:*:*:*:*:*:*:* |
| symantec_veritas | cluster_server | 3.5_solaris_mp1 | cpe:2.3:a:symantec_veritas:cluster_server:3.5_solaris_mp1:*:*:*:*:*:*:* |
| symantec_veritas | cluster_server | 3.5_solaris_mp2 | cpe:2.3:a:symantec_veritas:cluster_server:3.5_solaris_mp2:*:*:*:*:*:*:* |
| symantec_veritas | cluster_server | 3.5_solaris_mp3 | cpe:2.3:a:symantec_veritas:cluster_server:3.5_solaris_mp3:*:*:*:*:*:*:* |
| symantec_veritas | cluster_server | 4.0_aix | cpe:2.3:a:symantec_veritas:cluster_server:4.0_aix:*:*:*:*:*:*:* |
| symantec_veritas | cluster_server | 4.0_aix_beta | cpe:2.3:a:symantec_veritas:cluster_server:4.0_aix_beta:*:*:*:*:*:*:* |
| symantec_veritas | cluster_server | 4.0_linux | cpe:2.3:a:symantec_veritas:cluster_server:4.0_linux:*:*:*:*:*:*:* |
| symantec_veritas | cluster_server | 4.0_linux_beta | cpe:2.3:a:symantec_veritas:cluster_server:4.0_linux_beta:*:*:*:*:*:*:* |
| symantec_veritas | cluster_server | 4.0_solaris | cpe:2.3:a:symantec_veritas:cluster_server:4.0_solaris:*:*:*:*:*:*:* |
| symantec_veritas | cluster_server | 4.0_solaris_beta | cpe:2.3:a:symantec_veritas:cluster_server:4.0_solaris_beta:*:*:*:*:*:*:* |
| symantec_veritas | cluster_server | 4.0_solaris_mp1 | cpe:2.3:a:symantec_veritas:cluster_server:4.0_solaris_mp1:*:*:*:*:*:*:* |
| symantec_veritas | sanpoint_control_quickstart | 3.5_solaris | cpe:2.3:a:symantec_veritas:sanpoint_control_quickstart:3.5_solaris:*:*:*:*:*:*:* |
| symantec_veritas | storage_foundation | 1.0_aix | cpe:2.3:a:symantec_veritas:storage_foundation:1.0_aix:*:*:*:*:*:*:* |
| symantec_veritas | storage_foundation | 2.2_linux | cpe:2.3:a:symantec_veritas:storage_foundation:2.2_linux:*:*:*:*:*:*:* |
| symantec_veritas | storage_foundation | 2.2_vmware_esx | cpe:2.3:a:symantec_veritas:storage_foundation:2.2_vmware_esx:*:*:*:*:*:*:* |
| symantec_veritas | storage_foundation | 3.0_aix | cpe:2.3:a:symantec_veritas:storage_foundation:3.0_aix:*:*:*:*:*:*:* |
| symantec_veritas | storage_foundation | 3.4_aix | cpe:2.3:a:symantec_veritas:storage_foundation:3.4_aix:*:*:*:*:*:*:* |
| symantec_veritas | storage_foundation | 3.5_hp-ux | cpe:2.3:a:symantec_veritas:storage_foundation:3.5_hp-ux:*:*:*:*:*:*:* |
| symantec_veritas | storage_foundation | 3.5_solaris | cpe:2.3:a:symantec_veritas:storage_foundation:3.5_solaris:*:*:*:*:*:*:* |
| symantec_veritas | storage_foundation | 4.0_aix | cpe:2.3:a:symantec_veritas:storage_foundation:4.0_aix:*:*:*:*:*:*:* |
| symantec_veritas | storage_foundation | 4.0_linux | cpe:2.3:a:symantec_veritas:storage_foundation:4.0_linux:*:*:*:*:*:*:* |
| symantec_veritas | storage_foundation | 4.0_solaris | cpe:2.3:a:symantec_veritas:storage_foundation:4.0_solaris:*:*:*:*:*:*:* |
| symantec_veritas | storage_foundation_cluster_file_system | 4.0_aix | cpe:2.3:a:symantec_veritas:storage_foundation_cluster_file_system:4.0_aix:*:*:*:*:*:*:* |
| symantec_veritas | storage_foundation_cluster_file_system | 4.0_linux | cpe:2.3:a:symantec_veritas:storage_foundation_cluster_file_system:4.0_linux:*:*:*:*:*:*:* |
| symantec_veritas | storage_foundation_cluster_file_system | 4.0_solaris | cpe:2.3:a:symantec_veritas:storage_foundation_cluster_file_system:4.0_solaris:*:*:*:*:*:*:* |