Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2004-2205


Unknown vulnerability in Veritas Cluster Server 1.0.1 through 4.0 allows local users to gain root access via unspecified vectors.


Security Impact Summary

CVE-2004-2205 is a security vulnerability that . Impacting 1 product from symantec_veritas organizations running these solutions should prioritize assessment and patching.

Historical Context

Originally identified in 2004, this vulnerability predates many modern security frameworks and practices. The vulnerability landscape of that era was characterized by different threat models and less mature defense mechanisms compared to contemporary standards.


Published

2004-12-31T05:00:00.000

Last Modified

2026-04-16T00:27:16.627

Status

Modified

Source

[email protected]

Severity

CVSSv2: 7.2 (HIGH)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

3.9

Impact Score

10.0

Weaknesses
  • Type: Primary
    NVD-CWE-Other

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application symantec_veritas cluster_server 1.0.1_solaris Yes
Application symantec_veritas cluster_server 1.0.2_solaris Yes
Application symantec_veritas cluster_server 1.1.1_solaris Yes
Application symantec_veritas cluster_server 1.1.2_solaris Yes
Application symantec_veritas cluster_server 1.1_solaris Yes
Application symantec_veritas cluster_server 1.2_nt Yes
Application symantec_veritas cluster_server 1.3 Yes
Application symantec_veritas cluster_server 1.3.1_hp-ux Yes
Application symantec_veritas cluster_server 1.3.1_p3 Yes
Application symantec_veritas cluster_server 1.3_hp-ux Yes
Application symantec_veritas cluster_server 1.3_nt Yes
Application symantec_veritas cluster_server 1.3_p1 Yes
Application symantec_veritas cluster_server 1.3_p2 Yes
Application symantec_veritas cluster_server 1.3_p3 Yes
Application symantec_veritas cluster_server 1.3_p4 Yes
Application symantec_veritas cluster_server 1.3_solaris Yes
Application symantec_veritas cluster_server 1.3_solaris_pre-ga Yes
Application symantec_veritas cluster_server 2.0 Yes
Application symantec_veritas cluster_server 2.0_aix Yes
Application symantec_veritas cluster_server 2.0_linux Yes
Application symantec_veritas cluster_server 2.0_p1 Yes
Application symantec_veritas cluster_server 2.0_p2 Yes
Application symantec_veritas cluster_server 2.0_p3 Yes
Application symantec_veritas cluster_server 2.0_p4 Yes
Application symantec_veritas cluster_server 2.0_solaris Yes
Application symantec_veritas cluster_server 2.0_solaris_beta Yes
Application symantec_veritas cluster_server 2.0_solaris_ga Yes
Application symantec_veritas cluster_server 2.1 Yes
Application symantec_veritas cluster_server 2.1_linux Yes
Application symantec_veritas cluster_server 2.1_linux_p1 Yes
Application symantec_veritas cluster_server 2.2 Yes
Application symantec_veritas cluster_server 2.2_linux Yes
Application symantec_veritas cluster_server 2.2_linux_mp1p1 Yes
Application symantec_veritas cluster_server 2.2_mp1 Yes
Application symantec_veritas cluster_server 2.2_mp2 Yes
Application symantec_veritas cluster_server 3.5 Yes
Application symantec_veritas cluster_server 3.5.1_aix Yes
Application symantec_veritas cluster_server 3.5_aix Yes
Application symantec_veritas cluster_server 3.5_hp-ux Yes
Application symantec_veritas cluster_server 3.5_hp-ux_update_1 Yes
Application symantec_veritas cluster_server 3.5_hp-ux_update_2 Yes
Application symantec_veritas cluster_server 3.5_mp1 Yes
Application symantec_veritas cluster_server 3.5_mp1j Yes
Application symantec_veritas cluster_server 3.5_mp2 Yes
Application symantec_veritas cluster_server 3.5_p1 Yes
Application symantec_veritas cluster_server 3.5_solaris Yes
Application symantec_veritas cluster_server 3.5_solaris_beta Yes
Application symantec_veritas cluster_server 3.5_solaris_mp1 Yes
Application symantec_veritas cluster_server 3.5_solaris_mp2 Yes
Application symantec_veritas cluster_server 3.5_solaris_mp3 Yes
Application symantec_veritas cluster_server 4.0_aix Yes
Application symantec_veritas cluster_server 4.0_aix_beta Yes
Application symantec_veritas cluster_server 4.0_linux Yes
Application symantec_veritas cluster_server 4.0_linux_beta Yes
Application symantec_veritas cluster_server 4.0_solaris Yes
Application symantec_veritas cluster_server 4.0_solaris_beta Yes

References

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For symantec_veritas's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.