CVE-2005-3659

MEDIUM 5.0CVE-2005-3659 · Published 31/12/2005 · updated 16/06/2026

In short

CVE-2005-3659 is a MEDIUM (CVSS 5.0) vulnerability affecting legato networker (emc).
Chance of exploitation in the next 30 days (EPSS): 2.5%, higher than 84.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
legato networker emc	`= 7.2= 7.2.1= 7.2_build172`	No fix yet

Description

nsrd.exe in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as Sun Solstice Backup (SBU) 6.0 and 6.1 and StorEdge Enterprise Backup Software (EBS) 7.1 through 7.2L, allows remote attackers to cause a denial of service (nsrd service crash) via a malformed RPC request to RPC program number 390109, which triggers a null dereference.

References

ftp.legato.com/pub/NetWorker/Updates/LGTpa83990/README.TXT · Patch
secunia.com/advisories/18495 · Exploit
secunia.com/advisories/18615 · Patch
securitytracker.com/id · Patch
securitytracker.com/id · Patch
sunsolve.sun.com/searchproxy/document.do
idefense.com/intelligence/vulnerabilities/display.php · Exploit
legato.com/support/websupport/product_alerts/011606_NW.htm · Patch
securityfocus.com/bid/16275 · Patch
vupen.com/english/advisories/2006/0233 · Vendor Advisory
vupen.com/english/advisories/2006/0343 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/24173

More vulnerabilities in legato networker

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

legato networker

emc

= 7.2= 7.2.1= 7.2_build172

No fix yet

Description

More vulnerabilities in legato networker

See all →