PT-2005-3065 · Sco · Sco Unixware

Yun Jonglim · Publicado 2005-08-03 · Atualizado 2016-10-18 · CVE-2005-2132

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: SCO UnixWare versions 7.1.1 m5, 7.1.3 mp5, 7.1.4 mp2

Description: The issue allows remote attackers or local users to cause a denial of service, resulting in a lack of response, by sending multiple invalid portmap requests to the RPC portmapper (rpcbind).

Recommendations: For SCO UnixWare version 7.1.1 m5, consider restricting access to the RPC portmapper to minimize the risk of exploitation. For SCO UnixWare version 7.1.3 mp5, restrict access to the RPC portmapper to prevent denial of service attacks. For SCO UnixWare version 7.1.4 mp2, limit access to the RPC portmapper to reduce the risk of exploitation.

Correção

Identificadores relacionados

CVE-2005-2132

Produtos afetados

Sco Unixware

Referências · 5

• http://securityfocus.com/bid/14360 · Nota
• http://marc.info/?l=bugtraq&m=112247187722821&w=2 · Nota
• ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.31/SCOSA-2005.31.txt · Aviso do Fabricante
• http://secunia.com/advisories/16228 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-2132 · Nota de Segurança