Vulnerabilities in rpcbind
2 resultsCVE-2010-2061—rpcbind 0.2.0 does not properly validate (1) /tmp/portmap.xdr and (2) /tmp/rpcbind.xdr, which can be created by an attacker before the daemoEPSS 0.4%CVE-2010-2064—rpcbind 0.2.0 allows local users to write to arbitrary files or gain privileges via a symlink attack on (1) /tmp/portmap.xdr and (2) /tmp/rpEPSS 0.4%