VULNERABILITY INTELLIGENCE
CVE-2005-0359
CVSS score6.4 MEDIUM
EPSS probability4.29%
CISA KEVNot currently listed
Published2005-08-23
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:P
Description
The Legato PortMapper in EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 does not restrict access to the pmap_set and pmap_unset commands, which allows remote attackers to (1) cause a denial of service by using pmap_unset to un-register a NetWorker service, or (2) obtain sensitive information from NetWorker services by using pmap_set to register a new service.
Primary references
- cret@cert.org — Patch, Vendor Advisory
- cret@cert.org — Vendor Advisory
- cret@cert.org — Patch
- cret@cert.org — Patch, Vendor Advisory
- cret@cert.org — Patch, Third Party Advisory, US Government Resource
- cret@cert.org — Patch
- cret@cert.org
- cret@cert.org — Patch
- cret@cert.org
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch