CVE:CVE-2005-3566
CNNVD:CNNVD-200511-213
Veritas集群服务器是一款存储控制解决方案，可有效的管理节点集群。
Veritas Cluster Server中存在本地缓冲区溢出漏洞。在调用VCSI18N_LANG环境变量相关的多个ha命令时没有执行正确的边界检查，而受影响的代码是以系统管理员权限(Root SUID)运行的，因此恶意的攻击者可以破坏备份/存储功能，或在目标服务器上获得权限提升。
solution:Upgrade symantec_veritas cluster_server to a higher version than 2.2,2.2_linux,2.2_linux_mp1p1,2.2_mp1,2.2_mp2,3.5,3.5_aix,3.5_hp-ux,3.5_hp-ux_update_1,3.5_hp-ux_update_2,3.5_mp1,3.5_mp1j,3.5_mp2,3.5_p1,3.5_solaris,3.5_solaris_beta,3.5_solaris_mp1,3.5_solaris_mp2,3.5_solaris_mp3,4.0_aix,4.0_aix_beta,4.0_linux,4.0_linux_beta,4.0_solaris,4.0_solaris_beta,4.0_solaris_mp1,and avoid the version 2.2,2.2_linux,2.2_linux_mp1p1,2.2_mp1,2.2_mp2,3.5,3.5_aix,3.5_hp-ux,3.5_hp-ux_update_1,3.5_hp-ux_update_2,3.5_mp1,3.5_mp1j,3.5_mp2,3.5_p1,3.5_solaris,3.5_solaris_beta,3.5_solaris_mp1,3.5_solaris_mp2,3.5_solaris_mp3,4.0_aix,4.0_aix_beta,4.0_linux,4.0_linux_beta,4.0_solaris,4.0_solaris_beta,4.0_solaris_mp1; Upgrade symantec_veritas sanpoint_control_quickstart to a higher version than 3.5_solaris,and avoid the version 3.5_solaris; Upgrade symantec_veritas storage_foundation to a higher version than 1.0_aix,2.2_linux,2.2_vmware_esx,3.0_aix,3.4_aix,3.5_hp-ux,3.5_solaris,4.0_aix,4.0_linux,4.0_solaris,and avoid the version 1.0_aix,2.2_linux,2.2_vmware_esx,3.0_aix,3.4_aix,3.5_hp-ux,3.5_solaris,4.0_aix,4.0_linux,4.0_solaris; Upgrade symantec_veritas storage_foundation_cluster_file_system to a higher version than 4.0_aix,4.0_linux,4.0_solaris,and avoid the version 4.0_aix,4.0_linux,4.0_solaris