p PatchFirst

CVE-2010-2064

CVE-2010-2064

This page contains facts from public vulnerability sources. Check the original advisory before updating.

rpcbind 0.2.0 allows local users to write to arbitrary files or gain privileges via a symlink attack on (1) /tmp/portmap.xdr and (2) /tmp/rpcbind.xdr.

CVSS 7.1 · High · EPSS 0.4% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • rpcbind

    Versions
    • 0.2.0: Affected

    No fix published

  • rpcbind Debian:12

    Affected ranges
    • ECOSYSTEM: < 0.2.0-4.1

    Update to 0.2.0-4.1

  • rpcbind Debian:13

    Affected ranges
    • ECOSYSTEM: < 0.2.0-4.1

    Update to 0.2.0-4.1

  • rpcbind Debian:14

    Affected ranges
    • ECOSYSTEM: < 0.2.0-4.1

    Update to 0.2.0-4.1

Original sources

Check your server →