RPCBind 0.2.0 Multiple Vulnerabilities

RPCBind is prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2010-2061

creationtimestamp| type| source ---|---|--- 2019-10-30 01:31:39+00:00| seen| https://t.me/cibsecurity/7758 2019-11-05 22:27:47+00:00| seen| https://t.me/cibsecurity/7900...

CVE-2010-2061

rpcbind 0.2.0 does not properly validate 1 /tmp/portmap.xdr and 2 /tmp/rpcbind.xdr, which can be created by an attacker before the daemon is started...

CVE-2010-2061

The CVE-2010-2061 case concerns rpcbind 0.2.0, where the daemon mishandles validation of two transient files (/tmp/portmap.xdr and /tmp/rpcbind.xdr). The underlying issue is insufficient validation that attackers could exploit by pre-creating these files before the daemon starts, potentially infl...