CVE-2005-3116

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 27.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-11-18 · updated 2026-06-16

Description

Stack-based buffer overflow in a shared library as used by the Volume Manager daemon (vmd) in VERITAS NetBackup Enterprise Server 5.0 MP1 to MP5 and 5.1 up to MP3A allows remote attackers to execute arbitrary code via a crafted packet.

Affected products

Symantec Veritas Netbackup: 5.0_with_mp1, 5.0_with_mp2, 5.0_with_mp3, 5.0_with_mp4, 5.0_with_mp5, 5.1_with_mp1 (+3)

References

http://secunia.com/advisories/17503
http://securityresponse.symantec.com/avcenter/security/Content/2005.11.08b.html
http://securitytracker.com/id?1015170
http://seer.support.veritas.com/docs/279553.htm
http://www.idefense.com/application/poi/display?id=336&type=vulnerabilities
http://www.kb.cert.org/vuls/id/574662
http://www.osvdb.org/20674
http://www.securityfocus.com/archive/1/422066/100/0/threaded
http://www.securityfocus.com/archive/1/422157/100/0/threaded
http://www.securityfocus.com/bid/15353
http://www.vupen.com/english/advisories/2005/2349
https://exchange.xforce.ibmcloud.com/vulnerabilities/22985

Get alerted when CVE-2005-3116 or the next vulnerability affects your stack