CVE-2005-2996

Опубликовано: 20 сент. 2005

Источник: nvd

CVSS2: 7.5

EPSS Средний

Описание

Multiple heap-based and stack-based buffer overflows in certain DCOM server components in VERITAS Storage Exec Storage Exec 5.3 before Hotfix 9 and StorageCentral 5.2 before Hot Fix 2 allow remote attackers to execute arbitrary code via certain ActiveX controls.

Ссылки

http://secunia.com/advisories/16871
Patch
Vendor Advisory
http://securityresponse.symantec.com/avcenter/security/Content/2005.09.19.html
Exploit
Vendor Advisory
http://www.kb.cert.org/vuls/id/620497
Patch
Third Party Advisory
US Government Resource
http://www.kb.cert.org/vuls/id/927793
Patch
Third Party Advisory
US Government Resource
http://secunia.com/advisories/16871
Patch
Vendor Advisory
http://securityresponse.symantec.com/avcenter/security/Content/2005.09.19.html
Exploit
Vendor Advisory
http://www.kb.cert.org/vuls/id/620497
Patch
Third Party Advisory
US Government Resource
http://www.kb.cert.org/vuls/id/927793
Patch
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:symantec_veritas:storage_exec:5.3_rev._2190r:*:*:*:*:*:*:*

cpe:2.3:a:symantec_veritas:storagecentral:5.2_rev._2190r:*:*:*:*:*:*:*

EPSS

Процентиль: 94%

0.13701

Средний

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-c35h-x7vf-692j

github

почти 4 года назад