CVE-2010-2061: Input Validation
Guillem Jover pointed out: [1] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=583435#5
a deficiency in the way rpcbind gathered / saved registrations from / to dumped file(s). A local attacker could use this flaw to conduct symbolic link attacks, leading to un-authorized disclosure of sensitive information and / or to important system files data integrity corruption.
CVE Request: [2] http://www.openwall.com/lists/oss-security/2010/06/03/4
Other sources
rpcbind 0.2.0 does not properly validate (1) /tmp/portmap.xdr and (2) /tmp/rpcbind.xdr, which can be created by an attacker before the daemon is started.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-2061?
CVE-2010-2061 is considered a high severity vulnerability due to the potential for local attackers to exploit it.
How do I fix CVE-2010-2061?
To fix CVE-2010-2061, upgrade the rpcbind package to version 1.2.6-8.1 or newer for Debian systems.
What systems are affected by CVE-2010-2061?
CVE-2010-2061 affects rpcbind versions 0.2.0, as well as specific Debian packages like rpcbind version 1.2.5-9 and 1.2.6-6.
What kind of attack can be conducted using CVE-2010-2061?
An attacker can exploit CVE-2010-2061 to conduct unauthorized actions on systems running vulnerable versions of rpcbind.
Is CVE-2010-2061 specific to certain operating systems?
Yes, CVE-2010-2061 primarily affects Debian systems and systems using the Solaris implementation of rpcbind.