CVE-2005-3659
First published: Sat Dec 31 2005(Updated: )
nsrd.exe in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as Sun Solstice Backup (SBU) 6.0 and 6.1 and StorEdge Enterprise Backup Software (EBS) 7.1 through 7.2L, allows remote attackers to cause a denial of service (nsrd service crash) via a malformed RPC request to RPC program number 390109, which triggers a null dereference.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| NetWorker | =7.2 | |
| NetWorker | =7.2_build172 | |
| NetWorker | =7.2.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.idefense.com/intelligence/vulnerabilities/display.php?id=375
- http://www.legato.com/support/websupport/product_alerts/011606_NW.htm
- http://www.securityfocus.com/bid/16275
- http://secunia.com/advisories/18495
- http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102148-1
- http://secunia.com/advisories/18615
- http://securitytracker.com/id?1015500
- http://securitytracker.com/id?1015545
- http://www.vupen.com/english/advisories/2006/0343
- http://www.vupen.com/english/advisories/2006/0233
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24173
Frequently Asked Questions
What is the severity of CVE-2005-3659?
The severity of CVE-2005-3659 is considered medium due to the potential for remote denial of service.
How do I fix CVE-2005-3659?
To fix CVE-2005-3659, upgrade EMC Legato NetWorker to versions 7.1.4 or 7.2.1.Build.314 or higher.
Which products are affected by CVE-2005-3659?
Affected products include EMC Legato NetWorker versions 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup Software 7.1 through 7.2L.
What type of vulnerability is CVE-2005-3659?
CVE-2005-3659 is a denial of service vulnerability that allows remote attackers to crash the nsrd service.
Is CVE-2005-3659 being actively exploited?
There is no current information indicating that CVE-2005-3659 is actively being exploited, but it poses a risk to the affected systems.
- agent/type
- agent/remedy
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/weakness
- agent/references
- agent/author
- agent/severity
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/emc
- canonical/networker
- version/networker/7.2
- version/networker/7.2_build172
- version/networker/7.2.1