Sun Microsystems, Inc. Information for VU#801089

EMC Legato NetWorker portmapper allows remote calls to "pmap_set" and "pmap_unset"

Status

Affected

Vendor Statement

Sun repackages the Legato Networker product as Sun StorEdge Enterprise Backup, and is affected by the vulnerability described in CERT VU#801089. Sun has published Sun Alert 101866 which is available here:

http://sunsolve.sun.com/search/document.do?assetkey=1-26-101886-1

for this issue.

The Sun Alert contains details of patches which have been released for StorEdge Enterprise Backup version 7.1 and StorEdge Enterprise Backup version 7.2, which address this issue.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Vendor References

None

Addendum

There are no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us email.