Vulnerability Report

CVE-2005-0359

Title: Legato PortMapper pmap_set/pmap_unset commands access restriction bypass

DoS

Proof Of Concept

No public PoC currently indexed for CVE-2005-0359.

CWE Category NVD-CWE-noinfo
Published Date Aug 23, 2005
Modified Date Jun 16, 2026
Exploit Status Not Found
Score 6.4 CVSS v2.0
Exploit Probability (EPSS)
4.29%

Vulnerability Summary

CVE-2005-0359: The Legato PortMapper in EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 does not restrict access to the pmap_set and pmap_unset commands, which allows remote attackers to (1) cause a denial of service by using pmap_unset to un-register a NetWorker service, or (2) obtain sensitive information from NetWorker services by using pmap_set to register a new service.

Impacted Vendors

S
sun 2
E
emc 1

Reference Links

http://secunia.com/advisories/16464 http://secunia.com/advisories/16470 http://securitytracker.com/id?1014713 http://sunsolve.sun.com/search/document.do?assetkey=1-26-101886-1 http://www.kb.cert.org/vuls/id/801089 http://www.legato.com/support/websupport/product_alerts/081605_NW_port_mapper.htm http://www.osvdb.org/18802 http://www.securityfocus.com/bid/14582 https://exchange.xforce.ibmcloud.com/vulnerabilities/21893 http://secunia.com/advisories/16464 http://secunia.com/advisories/16470 http://securitytracker.com/id?1014713 http://sunsolve.sun.com/search/document.do?assetkey=1-26-101886-1 http://www.kb.cert.org/vuls/id/801089 http://www.legato.com/support/websupport/product_alerts/081605_NW_port_mapper.htm http://www.osvdb.org/18802 http://www.securityfocus.com/bid/14582 https://exchange.xforce.ibmcloud.com/vulnerabilities/21893
CVSS v2.0
Source Entity [email protected]
Severity MEDIUM
6.4
Access Vector
N/A
Authentication
N/A
RAW VECTOR AV:N/AC:L/Au:N/C:P/I:N/A:P

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2005-0359 Exploits & PoCs (Proof Of Concept)

No public PoCs found in our database for this CVE.

MODIFIED

Vulnerability data updated via NVD.

MODIFIED

Vulnerability data or affected products updated.

PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A
Complexity N/A
Privileges N/A
Interaction NONE
CVSS Vector String AV:N/AC:L/Au:N/C:P/I:N/A:P

Affected Stack

No specific products linked.