ID CVE-2004-1039
Summary The NFS mountd service on SCO UnixWare 7.1.1, 7.1.3, 7.1.4, and 7.0.1, and possibly other versions, when run from inetd, allows remote attackers to cause a denial of service (memory exhaustion) via a series of requests, which causes inetd to launch a separate process for each request.
References
Vulnerable Configurations
  • cpe:2.3:o:sco:openserver:5.0.6:*:*:*:*:*:*:*
    cpe:2.3:o:sco:openserver:5.0.6:*:*:*:*:*:*:*
  • cpe:2.3:o:sco:openserver:5.0.7:*:*:*:*:*:*:*
    cpe:2.3:o:sco:openserver:5.0.7:*:*:*:*:*:*:*
  • cpe:2.3:o:sco:unixware:7.1.1:*:*:*:*:*:*:*
    cpe:2.3:o:sco:unixware:7.1.1:*:*:*:*:*:*:*
  • cpe:2.3:o:sco:unixware:7.1.3:*:*:*:*:*:*:*
    cpe:2.3:o:sco:unixware:7.1.3:*:*:*:*:*:*:*
  • cpe:2.3:o:sco:unixware:7.1.4:*:*:*:*:*:*:*
    cpe:2.3:o:sco:unixware:7.1.4:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 05-09-2008 - 20:40)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
refmap via4
bid 12225
bugtraq 20050111 [NILESA-20050101]: Denial of Service vulnerability due to the mountd bug
sco SCOSA-2005.1
secunia 13805
Last major update 05-09-2008 - 20:40
Published 11-01-2005 - 05:00
Last modified 05-09-2008 - 20:40
Back to Top