Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2005-3659

nsrd.exe in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as Sun Solstice Backup (SBU) 6.0 and 6.1 and StorEdge Enterprise Backup Software (EBS) 7.1 through 7.2L, allows remote attackers to cause a denial of service (nsrd service crash) via a malformed RPC request to RPC program number 390109, which triggers a null dereference.

Published

2005-12-31T05:00:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 5.0 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: NONE
Integrity Impact: NONE
Availability Impact: PARTIAL

Exploitability Score

10.0

Impact Score

2.9

Weaknesses

Type: Primary
CWE-399

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	emc	legato_networker	7.2	Yes
Application	emc	legato_networker	7.2.1	Yes
Application	emc	legato_networker	7.2_build172	Yes

References

ftp://ftp.legato.com/pub/NetWorker/Updates/LGTpa83990/README.TXT Patch ([email protected])
http://secunia.com/advisories/18495 Exploit, Patch, Vendor Advisory ([email protected])
http://secunia.com/advisories/18615 Patch, Vendor Advisory ([email protected])
http://securitytracker.com/id?1015500 Patch ([email protected])
http://securitytracker.com/id?1015545 Patch ([email protected])
http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102148-1 ([email protected])
http://www.idefense.com/intelligence/vulnerabilities/display.php?id=375 Exploit, Patch ([email protected])
http://www.legato.com/support/websupport/product_alerts/011606_NW.htm Patch ([email protected])
http://www.securityfocus.com/bid/16275 Patch ([email protected])
http://www.vupen.com/english/advisories/2006/0233 Vendor Advisory ([email protected])
http://www.vupen.com/english/advisories/2006/0343 Vendor Advisory ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/24173 ([email protected])
ftp://ftp.legato.com/pub/NetWorker/Updates/LGTpa83990/README.TXT Patch (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/18495 Exploit, Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/18615 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://securitytracker.com/id?1015500 Patch (af854a3a-2127-422b-91ae-364da2661108)
http://securitytracker.com/id?1015545 Patch (af854a3a-2127-422b-91ae-364da2661108)
http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102148-1 (af854a3a-2127-422b-91ae-364da2661108)
http://www.idefense.com/intelligence/vulnerabilities/display.php?id=375 Exploit, Patch (af854a3a-2127-422b-91ae-364da2661108)
http://www.legato.com/support/websupport/product_alerts/011606_NW.htm Patch (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/16275 Patch (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/0233 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2006/0343 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/24173 (af854a3a-2127-422b-91ae-364da2661108)