CVE-2005-0138

Published Sep 21, 2005

Last updated 9 years ago

Overview

Description: rpc.mountd in SGI IRIX 6.5.25, 6.5.26, and 6.5.27 does not correctly allow access to anonymous clients that connect from a system whose hostname can not be determined. NOTE: while this issue occurs in a security mechanism, there is no apparent attacker role and probably does not satisfy the CVE definition of a vulnerability.
Source: cve@mitre.org
NVD status: Analyzed

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 7.5
Impact score: 6.4
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: CWE-17

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:sgi:irix:6.5.25:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6D5F652E-F7FB-4CA5-8434-B65F02C94976"
          },
          {
            "criteria": "cpe:2.3:o:sgi:irix:6.5.26:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "79B3A67E-826B-4588-8500-85454AC91AF1"
          },
          {
            "criteria": "cpe:2.3:o:sgi:irix:6.5.27:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A1B3C8DD-1108-452F-8D88-E4C3DBAC3462"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References