Unscored severity · published Aug 23, 2005
CVE-2005-0359
The Legato PortMapper in EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 does not restrict access to the pmap_set and…
–
CVSS
4.3%
EPSS
No
On KEV
Description
The Legato PortMapper in EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 does not restrict access to the pmap_set and pmap_unset commands, which allows remote attackers to (1) cause a denial of service by using pmap_unset to un-register a NetWorker service, or (2) obtain sensitive information from NetWorker services by using pmap_set to register a new service.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.3% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LN
Legato Networker · Emc
4.2.2; 6.0; 6.1; 7.2; 7.13 · source: NVD
SB
Solstice Backup · Sun
6.0; 6.1 · source: NVD
SE
Storedge Enterprise Backup Software · Sun
7.0; 7.1; 7.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-0359
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-0359
Patch
http://secunia.com/advisories/16464
Vendor Advisory
http://secunia.com/advisories/16470
Patch
http://securitytracker.com/id?1014713
Patch
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101886-1
Patch
http://www.kb.cert.org/vuls/id/801089
Patch
http://www.legato.com/support/websupport/product_alerts/081605_NW_port_mapper.htm
More from Legato Networker
–
CVE-2009-2754
Integer signedness error in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portmapper service (aka portmap.exe), as used in IBM Informix…
–
CVE-2007-3618
Stack-based buffer overflow in the NetWorker Remote Exec Service (nsrexecd.exe) in EMC Software NetWorker 7.x.x allows remote attackers to execute arbitrary code via a (1) poll or…
–
CVE-2005-3658
Multiple heap-based buffer overflows in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as Sun Solstice Backup (SBU) 6.0 and 6.1…
–
CVE-2005-3659
nsrd.exe in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as Sun Solstice Backup (SBU) 6.0 and 6.1 and StorEdge Enterprise…
–
CVE-2005-0358
EMC Legato NetWorker, Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 6.0 through 7.2 do not properly verify authentication tokens, which allows remote attackers to…