Unscored severity · published Sep 20, 2005
CVE-2005-2996
Multiple heap-based and stack-based buffer overflows in certain DCOM server components in VERITAS Storage Exec Storage Exec 5.3 before Hotfix 9 and StorageCentral 5.2 before Hot…
–
CVSS
5.6%
EPSS
No
On KEV
Description
Multiple heap-based and stack-based buffer overflows in certain DCOM server components in VERITAS Storage Exec Storage Exec 5.3 before Hotfix 9 and StorageCentral 5.2 before Hot Fix 2 allow remote attackers to execute arbitrary code via certain ActiveX controls.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.6% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SE
Storage Exec · Symantec Veritas
5.3_rev._2190r · source: NVD
ST
Storagecentral · Symantec Veritas
5.2_rev._2190r · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-2996
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-2996
Patch
http://secunia.com/advisories/16871
Exploit
http://securityresponse.symantec.com/avcenter/security/Content/2005.09.19.html
Patch
http://www.kb.cert.org/vuls/id/620497
Patch
http://www.kb.cert.org/vuls/id/927793