CVE-2005-0359

published 2005-08-23

CVE-2005-0359: The Legato PortMapper in EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 does not restrict access to the…

Priority P4 23 medium 6.4 CVSS 2.0

AV N AC L Au N C P I N A P

The Legato PortMapper in EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 does not restrict access to the pmap_set and pmap_unset commands, which allows remote attackers to (1) cause a denial of service by using pmap_unset to un-register a NetWorker service, or (2) obtain sensitive information from NetWorker services by using pmap_set to register a new service.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
emc	legato_networker	—	—
emc	legato_networker	—	—
emc	legato_networker	—	—
emc	legato_networker	—	—
emc	legato_networker	—	—
sun	solstice_backup	—	—
sun	solstice_backup	—	—
sun	storedge_enterprise_backup_software	—	—
sun	storedge_enterprise_backup_software	—	—
sun	storedge_enterprise_backup_software	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.