6.4
CVE-2005-0359
- EPSS 10.24%
- Published 23.08.2005 04:00:00
- Last modified 03.04.2025 01:03:51
- Source cret@cert.org
- Teams watchlist Login
- Open Login
The Legato PortMapper in EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 does not restrict access to the pmap_set and pmap_unset commands, which allows remote attackers to (1) cause a denial of service by using pmap_unset to un-register a NetWorker service, or (2) obtain sensitive information from NetWorker services by using pmap_set to register a new service.
Data is provided by the National Vulnerability Database (NVD)
Emc ≫ Legato Networker Version4.2.2
Emc ≫ Legato Networker Version6.0
Emc ≫ Legato Networker Version6.1
Emc ≫ Legato Networker Version7.2
Emc ≫ Legato Networker Version7.13
Sun ≫ Solstice Backup Version6.0
Sun ≫ Solstice Backup Version6.1
Sun ≫ Storedge Enterprise Backup Software Version7.0
Sun ≫ Storedge Enterprise Backup Software Version7.1
Sun ≫ Storedge Enterprise Backup Software Version7.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 10.24% | 0.924 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 6.4 | 10 | 4.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:P
|