CVE-2005-3116 in the critical feed json
Stack-based buffer overflow in a shared library as used by the Volume Manager daemon (vmd) in VERITAS NetBackup Enterprise Server 5.0 MP1 t…
published 2005-11-18 20 y ago modified 2026-06-16 4 mo ago also EUVD-2005-3116
- cvss
- 10.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 27.6%
- EPSS 27.6% chance of exploitation in 30 days, percentile 98%
- public exploits
- 1
- Exploit-DB
Summary
Stack-based buffer overflow in a shared library as used by the Volume Manager daemon (vmd) in VERITAS NetBackup Enterprise Server 5.0 MP1 to MP5 and 5.1 up to MP3A allows remote attackers to execute arbitrary code via a crafted packet.
Patch / fix
- osvdb.org/20674 patch
- securityfocus.com/bid/15353 patch
- securitytracker.com/id?1015170 patch
- securityresponse.symantec.com/avcenter/security/Content/2005.11.08b.html patch
- kb.cert.org/vuls/id/574662 advisory
- idefense.com/application/poi/display?id=336&type=vulnerabilities advisory
- secunia.com/advisories/17503 advisory
- seer.support.veritas.com/docs/279553.htm advisory
Timeline
- Published
- First public exploit (EDB-1421)
Exploit prediction
27.62% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-1421 Veritas NetBackup 4/5 - Volume Manager Daemon Remote Buffer Overflow remote, 2006-01-16
- securityfocus.com http://www.securityfocus.com/archive/1/422066/100/0/threaded referenced PoC, tagged "exploit" by a source, unverified
- securityfocus.com http://www.securityfocus.com/archive/1/422157/100/0/threaded referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
References
-
kb.cert.org
/vuls/id/574662
third-party-advisory, patch, us-government-resource
-
osvdb.org
/20674
vdb-entry, patch
-
securityfocus.com
/bid/15353
vdb-entry, patch
-
idefense.com
/application/poi/display?id=336&type=vulnerabilities
third-party-advisory, patch
-
securitytracker.com
/id?1015170
vdb-entry, patch
-
secunia.com
/advisories/17503
third-party-advisory, patch, vendor-advisory
-
securityresponse.symantec.com
/avcenter/security/Content/2005.11.08b.html
patch
-
seer.support.veritas.com
/docs/279553.htm
patch, vendor-advisory
-
securityfocus.com
/archive/1/422066/100/0/threaded
mailing-list, exploit, vendor-advisory
-
securityfocus.com
/archive/1/422157/100/0/threaded
mailing-list, exploit, vendor-advisory
-
exchange.xforce.ibmcloud.com
/vulnerabilities/22985
vdb-entry
-
vupen.com
/english/advisories/2005/2349
vdb-entry
Sources
- CVE List CVE-2005-3116
- NVD CVE-2005-3116
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.