SCO UnixWare RPC Portmapper Denial of Service Vulnerability

Bugtraq ID:	14360
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2005-2132
Remote:	Yes
Local:	No
Published:	Jul 25 2005 12:00AM
Updated:	Jul 12 2009 04:06PM
Credit:	Discovery is credited to Yun Jonglim <[email protected]>.
Vulnerable:	SCO Unixware 7.1.4 SCO Unixware 7.1.3 up SCO Unixware 7.1.3 SCO Unixware 7.1.2 SCO Unixware 7.1.1 SCO Unixware 7.1 SCO Unixware 7.0.1 SCO Unixware 7.0 SCO Open Server 6.0
Not Vulnerable:

SCO UnixWare RPC Portmapper Denial of Service Vulnerability

SCO UnixWare is reported prone to a denial of service vulnerability.

Reportedly, this issue arises when the application handles multiple invalid portmap requests.

UnixWare 7.x versions are reported to be affected.

SCO UnixWare RPC Portmapper Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

SCO UnixWare RPC Portmapper Denial of Service Vulnerability

Solution:
SCO has released advisory SCOSA-2005.31 to address this issue. Please see the referenced advisory for more information.

SCO has released advisory SCOSA-2005.43 to address this issue in OpenServer 6.0.0. Please see the referenced advisory for more information.


SCO Open Server 6.0

• SCO SCOSA-2005.43
  SCO Open Server 6.0
  ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.43

SCO Unixware 7.1.1

• SCO SCOSA-2005.31
  UnixWare 7.1.1
  ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.31

SCO Unixware 7.1.3

• SCO SCOSA-2005.31
  UnixWare 7.1.3
  ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.31

SCO Unixware 7.1.4

• SCO SCOSA-2005.31
  UnixWare 7.1.4
  ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.31

SCO UnixWare RPC Portmapper Denial of Service Vulnerability

References:

• Vendor Homepage (SCO)