Vulnerability Details : CVE-2005-3659
nsrd.exe in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as Sun Solstice Backup (SBU) 6.0 and 6.1 and StorEdge Enterprise Backup Software (EBS) 7.1 through 7.2L, allows remote attackers to cause a denial of service (nsrd service crash) via a malformed RPC request to RPC program number 390109, which triggers a null dereference.
Vulnerability category: Denial of service
Products affected by CVE-2005-3659
- cpe:2.3:a:emc:legato_networker:7.2:*:*:*:*:*:*:*
- cpe:2.3:a:emc:legato_networker:7.2_build172:*:*:*:*:*:*:*
- cpe:2.3:a:emc:legato_networker:7.2.1:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2005-3659
14.80%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 95 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2005-3659
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:N/I:N/A:P |
10.0
|
2.9
|
NIST |
CWE ids for CVE-2005-3659
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2005-3659
-
http://securitytracker.com/id?1015545
Patch
-
http://www.legato.com/support/websupport/product_alerts/011606_NW.htm
Patch
-
http://securitytracker.com/id?1015500
Patch
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/24173
-
http://www.vupen.com/english/advisories/2006/0233
Vendor Advisory
-
http://www.vupen.com/english/advisories/2006/0343
Vendor Advisory
-
http://www.securityfocus.com/bid/16275
Patch
-
http://www.idefense.com/intelligence/vulnerabilities/display.php?id=375
Exploit;Patch
-
http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102148-1
-
ftp://ftp.legato.com/pub/NetWorker/Updates/LGTpa83990/README.TXT
Patch
Jump to