Vulnerability CVE-2005-3659
Published: 2005-12-31   Modified: 2012-02-12

Description:
nsrd.exe in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as Sun Solstice Backup (SBU) 6.0 and 6.1 and StorEdge Enterprise Backup Software (EBS) 7.1 through 7.2L, allows remote attackers to cause a denial of service (nsrd service crash) via a malformed RPC request to RPC program number 390109, which triggers a null dereference.

CVSS2 => (AV:N/AC:L/Au:N/C:N/I:N/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
5/10
2.9/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
None
None
Partial
Affected software
EMC -> Legato networker 

 References:
http://www.securityfocus.com/bid/16275
http://www.legato.com/support/websupport/product_alerts/011606_NW.htm
http://www.idefense.com/intelligence/vulnerabilities/display.php?id=375
http://securitytracker.com/id?1015545
http://securitytracker.com/id?1015500
http://secunia.com/advisories/18615
http://secunia.com/advisories/18495
ftp://ftp.legato.com/pub/NetWorker/Updates/LGTpa83990/README.TXT
http://xforce.iss.net/xforce/xfdb/24173
http://www.vupen.com/english/advisories/2006/0343
http://www.vupen.com/english/advisories/2006/0233
http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102148-1
Copyright 2024, cxsecurity.com

 

Back to Top