CVEvulnerability
CVE-2005-3658
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-119
Description
Multiple heap-based buffer overflows in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as Sun Solstice Backup (SBU) 6.0 and 6.1 and StorEdge Enterprise Backup Software (EBS) 7.1 through 7.2L, allow remote attackers to execute arbitrary code or cause a denial of service (unresponsive application) via malformed RPC packets to (1) RPC program number 390109 (nsrd.exe) and (2) RPC program number 390113 (nsrexecd.exe).
Affected configurations
• emc legato networker 7.1.1
• emc legato networker 7.1.2
• emc legato networker 7.1.3
• emc legato networker 7.2
• emc legato networker 7.2.1
• emc legato networker 7.2 build172
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- ftp://ftp.legato.com/pub/NetWorker/Updates/LGTpa83990/README.TXT ftp.legato.com
- http://secunia.com/advisories/18495 Patch, Vendor Advisory
- http://secunia.com/advisories/18615 Patch, Vendor Advisory
- http://securitytracker.com/id?1015500 Patch
- http://securitytracker.com/id?1015545 Patch
- http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102148-1 sunsolve.sun.com
- http://www.idefense.com/intelligence/vulnerabilities/display.php?id=373 Patch, Vendor Advisory
- http://www.idefense.com/intelligence/vulnerabilities/display.php?id=374 Patch, Vendor Advisory
- http://www.legato.com/support/websupport/product_alerts/011606_NW.htm www.legato.com
- http://www.securityfocus.com/bid/16275 Patch
- http://www.vupen.com/english/advisories/2006/0233 Vendor Advisory
- http://www.vupen.com/english/advisories/2006/0343 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24174 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24175 exchange.xforce.ibmcloud.com
- ftp://ftp.legato.com/pub/NetWorker/Updates/LGTpa83990/README.TXT ftp.legato.com
- http://secunia.com/advisories/18495 Patch, Vendor Advisory
- http://secunia.com/advisories/18615 Patch, Vendor Advisory
- http://securitytracker.com/id?1015500 Patch
- http://securitytracker.com/id?1015545 Patch
- http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102148-1 sunsolve.sun.com
- http://www.idefense.com/intelligence/vulnerabilities/display.php?id=373 Patch, Vendor Advisory
- http://www.idefense.com/intelligence/vulnerabilities/display.php?id=374 Patch, Vendor Advisory
- http://www.legato.com/support/websupport/product_alerts/011606_NW.htm www.legato.com
- http://www.securityfocus.com/bid/16275 Patch
- http://www.vupen.com/english/advisories/2006/0233 Vendor Advisory
- http://www.vupen.com/english/advisories/2006/0343 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24174 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24175 exchange.xforce.ibmcloud.com