NVD

Id
66120  
Name
CVE-2005-0359  
Description
The Legato PortMapper in EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 does not restrict access to the pmap_set and pmap_unset commands, which allows remote attackers to (1) cause a denial of service by using pmap_unset to un-register a NetWorker service, or (2) obtain sensitive information from NetWorker services by using pmap_set to register a new service.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:P)  
Pub Date
2017-07-18  
Published
2005-08-23  
Modified Date
2017-07-10  
Seq
2005-0359  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
344390 66120 CVE-2005-0359 1014713  View
344391 66120 CVE-2005-0359 101886  View
344392 66120 CVE-2005-0359 VU#801089  View
344393 66120 CVE-2005-0359 http://www.legato.com/support/websupport/product_alerts/081605_NW_port_mapper.htm  View
344394 66120 CVE-2005-0359 14582  View
344395 66120 CVE-2005-0359 legato-portmapper-obtain-information(21893)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62610 JVNDB-2005-000825 EMC Legato NetWorker の portmapper にリモートからの要求を実行する脆弱性 EMC Legato NetWorker の portmapper の実装 lgtomapper には、遠隔のホストから pmap_set() や pmap_unset() を実行できる脆弱性が存在します。 CVE-2005-0359 11563 CVE-2005-0359 66120 6.4 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000825.html 2005-08-18 2008-11-21 View