Unknown vulnerability in Veritas Cluster Server 1.0.1 through 4.0 allows local users to…
Priority LOW 32Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Complete · Complete · Complete
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA.
Summary
Unknown vulnerability in Veritas Cluster Server 1.0.1 through 4.0 allows local users to gain root access via unspecified vectors.
Why it matters now
EPSS 0.00346 28th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 56
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:symantec_veritas:cluster_server:1.0.1_solaris:*:*:*:*:*:*:* | 1.0.1_solaris | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:1.0.2_solaris:*:*:*:*:*:*:* | 1.0.2_solaris | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:1.1.1_solaris:*:*:*:*:*:*:* | 1.1.1_solaris | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:1.1.2_solaris:*:*:*:*:*:*:* | 1.1.2_solaris | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:1.1_solaris:*:*:*:*:*:*:* | 1.1_solaris | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:1.2_nt:*:*:*:*:*:*:* | 1.2_nt | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:1.3:*:*:*:*:*:*:* | 1.3 | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:1.3.1_hp-ux:*:*:*:*:*:*:* | 1.3.1_hp-ux | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:1.3.1_p3:*:*:*:*:*:*:* | 1.3.1_p3 | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:1.3_hp-ux:*:*:*:*:*:*:* | 1.3_hp-ux | Vulnerable | Symantec Veritas |
- cpe:2.3:a:symantec_veritas:cluster_server:1.0.1_solaris:*:*:*:*:*:*:* Versions 1.0.1_solaris Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:1.0.2_solaris:*:*:*:*:*:*:* Versions 1.0.2_solaris Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:1.1.1_solaris:*:*:*:*:*:*:* Versions 1.1.1_solaris Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:1.1.2_solaris:*:*:*:*:*:*:* Versions 1.1.2_solaris Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:1.1_solaris:*:*:*:*:*:*:* Versions 1.1_solaris Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:1.2_nt:*:*:*:*:*:*:* Versions 1.2_nt Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:1.3:*:*:*:*:*:*:* Versions 1.3 Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:1.3.1_hp-ux:*:*:*:*:*:*:* Versions 1.3.1_hp-ux Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:1.3.1_p3:*:*:*:*:*:*:* Versions 1.3.1_p3 Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:1.3_hp-ux:*:*:*:*:*:*:* Versions 1.3_hp-ux Vulnerable ·Symantec Veritas
Show 46 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:symantec_veritas:cluster_server:1.3_nt:*:*:*:*:*:*:* | 1.3_nt | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:1.3_p1:*:*:*:*:*:*:* | 1.3_p1 | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:1.3_p2:*:*:*:*:*:*:* | 1.3_p2 | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:1.3_p3:*:*:*:*:*:*:* | 1.3_p3 | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:1.3_p4:*:*:*:*:*:*:* | 1.3_p4 | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:1.3_solaris:*:*:*:*:*:*:* | 1.3_solaris | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:1.3_solaris_pre-ga:*:*:*:*:*:*:* | 1.3_solaris_pre-ga | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:2.0:*:*:*:*:*:*:* | 2.0 | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:2.0_aix:*:*:*:*:*:*:* | 2.0_aix | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:2.0_linux:*:*:*:*:*:*:* | 2.0_linux | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:2.0_p1:*:*:*:*:*:*:* | 2.0_p1 | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:2.0_p2:*:*:*:*:*:*:* | 2.0_p2 | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:2.0_p3:*:*:*:*:*:*:* | 2.0_p3 | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:2.0_p4:*:*:*:*:*:*:* | 2.0_p4 | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:2.0_solaris:*:*:*:*:*:*:* | 2.0_solaris | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:2.0_solaris_beta:*:*:*:*:*:*:* | 2.0_solaris_beta | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:2.0_solaris_ga:*:*:*:*:*:*:* | 2.0_solaris_ga | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:2.1:*:*:*:*:*:*:* | 2.1 | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:2.1_linux:*:*:*:*:*:*:* | 2.1_linux | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:2.1_linux_p1:*:*:*:*:*:*:* | 2.1_linux_p1 | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:2.2:*:*:*:*:*:*:* | 2.2 | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:2.2_linux:*:*:*:*:*:*:* | 2.2_linux | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:2.2_linux_mp1p1:*:*:*:*:*:*:* | 2.2_linux_mp1p1 | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:2.2_mp1:*:*:*:*:*:*:* | 2.2_mp1 | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:2.2_mp2:*:*:*:*:*:*:* | 2.2_mp2 | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:3.5:*:*:*:*:*:*:* | 3.5 | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:3.5.1_aix:*:*:*:*:*:*:* | 3.5.1_aix | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:3.5_aix:*:*:*:*:*:*:* | 3.5_aix | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:3.5_hp-ux:*:*:*:*:*:*:* | 3.5_hp-ux | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:3.5_hp-ux_update_1:*:*:*:*:*:*:* | 3.5_hp-ux_update_1 | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:3.5_hp-ux_update_2:*:*:*:*:*:*:* | 3.5_hp-ux_update_2 | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:3.5_mp1:*:*:*:*:*:*:* | 3.5_mp1 | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:3.5_mp1j:*:*:*:*:*:*:* | 3.5_mp1j | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:3.5_mp2:*:*:*:*:*:*:* | 3.5_mp2 | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:3.5_p1:*:*:*:*:*:*:* | 3.5_p1 | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:3.5_solaris:*:*:*:*:*:*:* | 3.5_solaris | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:3.5_solaris_beta:*:*:*:*:*:*:* | 3.5_solaris_beta | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:3.5_solaris_mp1:*:*:*:*:*:*:* | 3.5_solaris_mp1 | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:3.5_solaris_mp2:*:*:*:*:*:*:* | 3.5_solaris_mp2 | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:3.5_solaris_mp3:*:*:*:*:*:*:* | 3.5_solaris_mp3 | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:4.0_aix:*:*:*:*:*:*:* | 4.0_aix | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:4.0_aix_beta:*:*:*:*:*:*:* | 4.0_aix_beta | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:4.0_linux:*:*:*:*:*:*:* | 4.0_linux | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:4.0_linux_beta:*:*:*:*:*:*:* | 4.0_linux_beta | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:4.0_solaris:*:*:*:*:*:*:* | 4.0_solaris | Vulnerable | Symantec Veritas |
| cpe:2.3:a:symantec_veritas:cluster_server:4.0_solaris_beta:*:*:*:*:*:*:* | 4.0_solaris_beta | Vulnerable | Symantec Veritas |
- cpe:2.3:a:symantec_veritas:cluster_server:1.3_nt:*:*:*:*:*:*:* Versions 1.3_nt Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:1.3_p1:*:*:*:*:*:*:* Versions 1.3_p1 Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:1.3_p2:*:*:*:*:*:*:* Versions 1.3_p2 Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:1.3_p3:*:*:*:*:*:*:* Versions 1.3_p3 Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:1.3_p4:*:*:*:*:*:*:* Versions 1.3_p4 Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:1.3_solaris:*:*:*:*:*:*:* Versions 1.3_solaris Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:1.3_solaris_pre-ga:*:*:*:*:*:*:* Versions 1.3_solaris_pre-ga Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:2.0_aix:*:*:*:*:*:*:* Versions 2.0_aix Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:2.0_linux:*:*:*:*:*:*:* Versions 2.0_linux Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:2.0_p1:*:*:*:*:*:*:* Versions 2.0_p1 Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:2.0_p2:*:*:*:*:*:*:* Versions 2.0_p2 Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:2.0_p3:*:*:*:*:*:*:* Versions 2.0_p3 Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:2.0_p4:*:*:*:*:*:*:* Versions 2.0_p4 Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:2.0_solaris:*:*:*:*:*:*:* Versions 2.0_solaris Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:2.0_solaris_beta:*:*:*:*:*:*:* Versions 2.0_solaris_beta Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:2.0_solaris_ga:*:*:*:*:*:*:* Versions 2.0_solaris_ga Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:2.1:*:*:*:*:*:*:* Versions 2.1 Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:2.1_linux:*:*:*:*:*:*:* Versions 2.1_linux Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:2.1_linux_p1:*:*:*:*:*:*:* Versions 2.1_linux_p1 Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:2.2:*:*:*:*:*:*:* Versions 2.2 Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:2.2_linux:*:*:*:*:*:*:* Versions 2.2_linux Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:2.2_linux_mp1p1:*:*:*:*:*:*:* Versions 2.2_linux_mp1p1 Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:2.2_mp1:*:*:*:*:*:*:* Versions 2.2_mp1 Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:2.2_mp2:*:*:*:*:*:*:* Versions 2.2_mp2 Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:3.5:*:*:*:*:*:*:* Versions 3.5 Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:3.5.1_aix:*:*:*:*:*:*:* Versions 3.5.1_aix Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:3.5_aix:*:*:*:*:*:*:* Versions 3.5_aix Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:3.5_hp-ux:*:*:*:*:*:*:* Versions 3.5_hp-ux Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:3.5_hp-ux_update_1:*:*:*:*:*:*:* Versions 3.5_hp-ux_update_1 Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:3.5_hp-ux_update_2:*:*:*:*:*:*:* Versions 3.5_hp-ux_update_2 Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:3.5_mp1:*:*:*:*:*:*:* Versions 3.5_mp1 Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:3.5_mp1j:*:*:*:*:*:*:* Versions 3.5_mp1j Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:3.5_mp2:*:*:*:*:*:*:* Versions 3.5_mp2 Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:3.5_p1:*:*:*:*:*:*:* Versions 3.5_p1 Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:3.5_solaris:*:*:*:*:*:*:* Versions 3.5_solaris Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:3.5_solaris_beta:*:*:*:*:*:*:* Versions 3.5_solaris_beta Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:3.5_solaris_mp1:*:*:*:*:*:*:* Versions 3.5_solaris_mp1 Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:3.5_solaris_mp2:*:*:*:*:*:*:* Versions 3.5_solaris_mp2 Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:3.5_solaris_mp3:*:*:*:*:*:*:* Versions 3.5_solaris_mp3 Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:4.0_aix:*:*:*:*:*:*:* Versions 4.0_aix Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:4.0_aix_beta:*:*:*:*:*:*:* Versions 4.0_aix_beta Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:4.0_linux:*:*:*:*:*:*:* Versions 4.0_linux Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:4.0_linux_beta:*:*:*:*:*:*:* Versions 4.0_linux_beta Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:4.0_solaris:*:*:*:*:*:*:* Versions 4.0_solaris Vulnerable ·Symantec Veritas
- cpe:2.3:a:symantec_veritas:cluster_server:4.0_solaris_beta:*:*:*:*:*:*:* Versions 4.0_solaris_beta Vulnerable ·Symantec Veritas
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2004-2205
- 2026-10-03 Alias added: GHSA-669j-vghp-45v5
References
More Symantec Veritas Cluster Server vulnerabilities
- TI-2002-01736 Unknown vulnerability in Veritas Cluster Server (VCS) 1.2 for WindowsNT, Cluster Server… CVSS 2.0HIGH 7.5
- TI-2005-03384 Buffer overflow in various ha commands of VERITAS Cluster Server for UNIX before 4.0MP2… CVSS 2.0MEDIUM 4.3
- TI-2001-00285 VERITAS Cluster Server (VCS) 1.3.0 on Solaris allows local users to cause a denial of… CVSS 2.0LOW 2.1
Sources
- CVE-2004-2205 · CVE Program
- CVE-2004-2205 · NVD
- FIRST EPSS
- GHSA-669j-vghp-45v5 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences