CVE-2010-2061

2019-10-2921:01:22

redhat

www.cve.org

0.0004 Low

EPSS

Percentile

14.4%

JSON

rpcbind 0.2.0 does not properly validate (1) /tmp/portmap.xdr and (2) /tmp/rpcbind.xdr, which can be created by an attacker before the daemon is started.

CNA Affected

[
  {
    "product": "rpcbind",
    "vendor": "rpcbind",
    "versions": [
      {
        "status": "affected",
        "version": "0.2.0"
      }
    ]
  }
]