Lucene search

K
cve[email protected]CVE-2005-2996
HistorySep 20, 2005 - 10:03 p.m.

CVE-2005-2996

2005-09-2022:03:00
web.nvd.nist.gov
24
cve-2005-2996
buffer overflow
veritas storage exec
storagecentral
dcom server
nvd
security vulnerability

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.9 High

AI Score

Confidence

High

0.023 Low

EPSS

Percentile

89.8%

Multiple heap-based and stack-based buffer overflows in certain DCOM server components in VERITAS Storage Exec Storage Exec 5.3 before Hotfix 9 and StorageCentral 5.2 before Hot Fix 2 allow remote attackers to execute arbitrary code via certain ActiveX controls.

Affected configurations

NVD
Node
symantec_veritasstorage_execMatch5.3_rev._2190r
OR
symantec_veritasstoragecentralMatch5.2_rev._2190r

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.9 High

AI Score

Confidence

High

0.023 Low

EPSS

Percentile

89.8%