Vulnerability Name:

CVE-2005-0138 (CCN-20911)

Assigned:2005-06-07
Published:2005-06-07
Updated:2016-05-09
Summary:rpc.mountd in SGI IRIX 6.5.25, 6.5.26, and 6.5.27 does not correctly allow access to anonymous clients that connect from a system whose hostname can not be determined.
Note: while this issue occurs in a security mechanism, there is no apparent attacker role and probably does not satisfy the CVE definition of a vulnerability.
CVSS v3 Severity:7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): Low
Integrity (I): Low
Availibility (A): Low
CVSS v2 Severity:7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
7.5 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
Vulnerability Type:CWE-17
Vulnerability Consequences:Denial of Service
References:Source: CCN
Type: SGI Security Advisory 20050601-01-P
rpc.mountd security issues in IRIX 6.5.25-6.5.27

Source: SGI
Type: Patch
20050601-01-U

Source: MITRE
Type: CNA
CVE-2005-0138

Source: MITRE
Type: CNA
CVE-2005-0139

Source: CCN
Type: SA15619
SGI IRIX rpc.mountd "read-mostly" Exports Read/Write Access

Source: SECUNIA
Type: UNKNOWN
15619

Source: CIAC
Type: Vendor Advisory
P-214

Source: CCN
Type: OSVDB ID: 17206
IRIX rpc.mountd Anonymous Access Deny Issue

Source: CCN
Type: BID-13889
SGI IRIX RPC.MountD Read-Mostly Mount Unspecified File Access Vulnerability

Source: VUPEN
Type: UNKNOWN
ADV-2005-0702

Source: XF
Type: UNKNOWN
irix-rpcmountd-hostname-dos(20911)

Vulnerable Configuration:Configuration 1:
  • cpe:/o:sgi:irix:6.5.25:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.26:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.27:*:*:*:*:*:*:*

  • Configuration CCN 1:
  • cpe:/o:sgi:irix:6.5.25:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.26:*:*:*:*:*:*:*
  • OR cpe:/o:sgi:irix:6.5.27:*:*:*:*:*:*:*

  • * Denotes that component is vulnerable
    BACK
    sgi irix 6.5.25
    sgi irix 6.5.26
    sgi irix 6.5.27
    sgi irix 6.5.25
    sgi irix 6.5.26
    sgi irix 6.5.27