CVE-2005-2132
CVE-2005-2132 is a low-severity vulnerability in Sco Unixware with a CVSS 2.0 base score of 2.1. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Low (CVSS 2.0 base score 2.1)
- EPSS exploit prediction: 1% (42nd percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Sco Unixware
- Published:
- Last modified:
Description
RPC portmapper (rpcbind) in SCO UnixWare 7.1.1 m5, 7.1.3 mp5, and 7.1.4 mp2 allows remote attackers or local users to cause a denial of service (lack of response) via multiple invalid portmap requests.
Frequently asked questions
- What is CVE-2005-2132?
- RPC portmapper (rpcbind) in SCO UnixWare 7.1.1 m5, 7.1.3 mp5, and 7.1.4 mp2 allows remote attackers or local users to cause a denial of service (lack of response) via multiple invalid portmap requests.
- How severe is CVE-2005-2132?
- CVE-2005-2132 has a CVSS 2.0 base score of 2.1, rated low severity.
- Is CVE-2005-2132 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (42nd percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2005-2132?
- CVE-2005-2132 primarily affects Sco Unixware. In total, 3 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2005-2132?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2005-2132 published?
- CVE-2005-2132 was published on 2005-08-03 and last updated on 2026-06-16.
References
- ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.31/SCOSA-2005.31.txt
- http://marc.info/?l=bugtraq&m=112247187722821&w=2
- http://secunia.com/advisories/16228
- http://www.securityfocus.com/bid/14360
Affected products (3)
- cpe:2.3:o:sco:unixware:7.1.1_m5:*:*:*:*:*:*:*
- cpe:2.3:o:sco:unixware:7.1.3_mp5:*:*:*:*:*:*:*
- cpe:2.3:o:sco:unixware:7.1.4_mp2:*:*:*:*:*:*:*
More vulnerabilities in Sco Unixware
- CVE-2000-0348 — Critical (CVSS 10.0): A vulnerability in the Sendmail configuration file sendmail.cf as installed in SCO UnixWare 7.1.0 and earlier allows an…
- CVE-2000-0308 — Critical (CVSS 10.0): Insecure file permissions for Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 in SCO…
- CVE-2000-0003 — Critical (CVSS 10.0): Buffer overflow in UnixWare rtpm program allows local users to gain privileges via a long environmental variable.
- CVE-2000-0026 — Critical (CVSS 10.0): Buffer overflow in UnixWare i2odialogd daemon allows remote attackers to gain root access via a long username/password…
- CVE-1999-0835 — Critical (CVSS 10.0): Denial of service in BIND named via malformed SIG records.
- CVE-1999-0368 — Critical (CVSS 10.0): Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto.