CVEvulnerability

CVE-2005-0359

6.4 MEDIUM Published 2005-08-23 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-08-23
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:P

Description

The Legato PortMapper in EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 does not restrict access to the pmap_set and pmap_unset commands, which allows remote attackers to (1) cause a denial of service by using pmap_unset to un-register a NetWorker service, or (2) obtain sensitive information from NetWorker services by using pmap_set to register a new service.

Affected configurations

• emc legato networker 4.2.2 • emc legato networker 6.0 • emc legato networker 6.1 • emc legato networker 7.2 • emc legato networker 7.13 • sun solstice backup 6.0 • sun solstice backup 6.1 • sun storedge enterprise backup software 7.0 • sun storedge enterprise backup software 7.1 • sun storedge enterprise backup software 7.2

References