Design/Logic Flaw

2019-10-2922:15:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

14.4%

JSON

rpcbind 0.2.0 does not properly validate (1) /tmp/portmap.xdr and (2) /tmp/rpcbind.xdr, which can be created by an attacker before the daemon is started.

CPENameOperatorVersion
rpcbindeq0.2.0

CPE	Name	Operator	Version
	rpcbind	eq	0.2.0

References

access.redhat.com/security/cve/cve-2010-2061

bugs.debian.org/cgi-bin/bugreport.cgi?bug=583435

bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-2061

security-tracker.debian.org/tracker/CVE-2010-2061

www.openwall.com/lists/oss-security/2010/06/08/3