CVE-2005-0138

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

rpc.mountd in SGI IRIX 6.5.25, 6.5.26, and 6.5.27 does not correctly allow access to anonymous clients that connect from a system whose hostname can not be determined. NOTE: while this issue occurs in a security mechanism, there is no apparent attacker role and probably does not satisfy the CVE definition of a vulnerability.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-17

Affected software

No affected versions have been published.

Timeline

Published: Sep 21, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-01397.5Unknown vulnerability in rpc.mountd in SGI IRIX 6.5.25, 6.5.26, and 6.5.27 does not sufficiently restrict access rights for read-mostly expo CVE-2005-01407.5Buffer overflow in PeID allows attackers to execute arbitrary code via a PE file with an Import Address Table containing a long import libra CVE-2005-01412.6Firefox before 1.0 and Mozilla before 1.7.5 allow remote attackers to load local files via links "with a custom getter and toString method" CVE-2005-01422.1Firefox 0.9, Thunderbird 0.6 and other versions before 0.9, and Mozilla 1.7 before 1.7.5 save temporary files with world-readable permission CVE-2005-01432.6Firefox before 1.0 and Mozilla before 1.7.5 display the SSL lock icon when an insecure page loads a binary file from a trusted site, which c CVE-2005-01442.6Firefox before 1.0 and Mozilla before 1.7.5 display the secure site lock icon when a view-source: URL references a secure SSL site while an CVE-2005-01452.6Firefox before 1.0 does not properly distinguish between user-generated and synthetic click events, which allows remote attackers to use Jav CVE-2005-01465.0Firefox before 1.0 and Mozilla before 1.7.5 allow remote attackers to obtain sensitive data from the clipboard via Javascript that generates CVE-2005-01477.5Firefox before 1.0 and Mozilla before 1.7.5, when configured to use a proxy, respond to 407 proxy auth requests from arbitrary servers, whic CVE-2005-01485.0Thunderbird before 0.9, when running on Windows systems, uses the default handler when processing javascript: links, which invokes Internet CVE-2005-01495.0Thunderbird 0.6 through 0.9 and Mozilla 1.7 through 1.7.3 does not obey the network.cookie.disableCookieForMailNews preference, which could CVE-2005-01505.0Firefox before 1.0 allows the user to store a (1) javascript: or (2) data: URLs as a Livefeed bookmark, then executes it in the security con