CVE-2005-0359

Severity Score

6.4

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The Legato PortMapper in EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 does not restrict access to the pmap_set and pmap_unset commands, which allows remote attackers to (1) cause a denial of service by using pmap_unset to un-register a NetWorker service, or (2) obtain sensitive information from NetWorker services by using pmap_set to register a new service.

*Credits: N/A

CVSS Scores

NISTv2 6.4

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2005-02-11 CVE Reserved
2005-08-20 CVE Published
2023-03-07 EPSS Updated
2024-08-07 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (9)

URL	Tag	Source
http://www.osvdb.org/18802	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/21893	Vdb Entry

URL	Date	SRC

URL	Date	SRC
http://secunia.com/advisories/16464	2017-07-11
http://securitytracker.com/id?1014713	2017-07-11
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101886-1	2017-07-11
http://www.kb.cert.org/vuls/id/801089	2017-07-11
http://www.legato.com/support/websupport/product_alerts/081605_NW_port_mapper.htm	2017-07-11
http://www.securityfocus.com/bid/14582	2017-07-11

URL	Date	SRC
http://secunia.com/advisories/16470	2017-07-11

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Emc Search vendor "Emc"		Legato Networker Search vendor "Emc" for product "Legato Networker"				4.2.2 Search vendor "Emc" for product "Legato Networker" and version "4.2.2"		-		Affected
Emc Search vendor "Emc"		Legato Networker Search vendor "Emc" for product "Legato Networker"				6.0 Search vendor "Emc" for product "Legato Networker" and version "6.0"		-		Affected
Emc Search vendor "Emc"		Legato Networker Search vendor "Emc" for product "Legato Networker"				6.1 Search vendor "Emc" for product "Legato Networker" and version "6.1"		-		Affected
Emc Search vendor "Emc"		Legato Networker Search vendor "Emc" for product "Legato Networker"				7.2 Search vendor "Emc" for product "Legato Networker" and version "7.2"		-		Affected
Emc Search vendor "Emc"		Legato Networker Search vendor "Emc" for product "Legato Networker"				7.13 Search vendor "Emc" for product "Legato Networker" and version "7.13"		-		Affected
Sun Search vendor "Sun"		Solstice Backup Search vendor "Sun" for product "Solstice Backup"				6.0 Search vendor "Sun" for product "Solstice Backup" and version "6.0"		-		Affected
Sun Search vendor "Sun"		Solstice Backup Search vendor "Sun" for product "Solstice Backup"				6.1 Search vendor "Sun" for product "Solstice Backup" and version "6.1"		-		Affected
Sun Search vendor "Sun"		Storedge Enterprise Backup Software Search vendor "Sun" for product "Storedge Enterprise Backup Software"				7.0 Search vendor "Sun" for product "Storedge Enterprise Backup Software" and version "7.0"		-		Affected
Sun Search vendor "Sun"		Storedge Enterprise Backup Software Search vendor "Sun" for product "Storedge Enterprise Backup Software"				7.1 Search vendor "Sun" for product "Storedge Enterprise Backup Software" and version "7.1"		-		Affected
Sun Search vendor "Sun"		Storedge Enterprise Backup Software Search vendor "Sun" for product "Storedge Enterprise Backup Software"				7.2 Search vendor "Sun" for product "Storedge Enterprise Backup Software" and version "7.2"		-		Affected