PT-2005-3065 · Sco · Sco Unixware

Yun Jonglim · Published 2005-08-03 · Updated 2016-10-18 · CVE-2005-2132

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: SCO UnixWare versions 7.1.1 m5, 7.1.3 mp5, 7.1.4 mp2

Description: The issue allows remote attackers or local users to cause a denial of service, resulting in a lack of response, by sending multiple invalid portmap requests to the RPC portmapper (rpcbind).

Recommendations: For SCO UnixWare version 7.1.1 m5, consider restricting access to the RPC portmapper to minimize the risk of exploitation. For SCO UnixWare version 7.1.3 mp5, restrict access to the RPC portmapper to prevent denial of service attacks. For SCO UnixWare version 7.1.4 mp2, limit access to the RPC portmapper to reduce the risk of exploitation.

Fix

Related Identifiers

CVE-2005-2132

Affected Products

Sco Unixware

References · 5

• ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.31/SCOSA-2005.31.txt · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-2132 · Security Note
• http://securityfocus.com/bid/14360 · Note
• http://marc.info/?l=bugtraq&m=112247187722821&w=2 · Note
• http://secunia.com/advisories/16228 · Note