CVE-2005-3116

Related Files

veritasOverflow.c

Posted Jan 21, 2006

Authored by Patrick Thomassen

Veritas NetBackup v4/v5 "Volume Manager Daemon" remote stack overflow exploit.

tags | exploit, remote, overflow

advisories | CVE-2005-3116

SHA-256 | 6bf7782bcf9b0245b5dabd142ec6d47ca62c1fc2f9680b45ea2ab2ef81f1da93

Download | Favorite | View

iDEFENSE Security Advisory 2005-11-10.1

Posted Nov 12, 2005

Authored by iDefense Labs | Site idefense.com

iDEFENSE Security Advisory 11.10.05 - Exploitation of a buffer overflow vulnerability in Veritas Netbackup could lead to a remote Denial Of Service or remote code execution. The Veritas Netbackup Volume Manager keeps track of the location of volumes (tapes) needed for backup or restore. By sending a specially crafted packet to the Volume Manager stack overflow occurs. This is caused by improper bounds checking. Confirmed vulnerable: Veritas Netbackup 5.0 with MP1 (vmd.exe 5.0.0.370), Veritas Netbackup 5.0 with MP2 (vmd.exe 5.0.0.372), Veritas Netbackup 5.0 with MP3 (vmd.exe 5.0.0.377), Veritas Netbackup 5.0 with MP4 (vmd.exe 5.0.0.382), Veritas Netbackup 5.0 with MP5 (vmd.exe 5.0.0.387), Veritas Netbackup 5.1 without MP (vmd.exe 5.1.0.135), Veritas Netbackup 5.1 with MP1 (vmd.exe 5.1.0.140), Veritas Netbackup 5.1 with MP2 (vmd.exe 5.1.0.146), Veritas Netbackup 5.1 with MP3A (vmd.exe 5.1.0.150).

tags | advisory, remote, denial of service, overflow, code execution

advisories | CVE-2005-3116

SHA-256 | 0ac9d8914a2943178c3bae5978669d615d29fc3c632ed89f22964e6488d7f562

Download | Favorite | View