CVE-2010-2064: Rpcbind Project Rpcbind

High severity, CVSS 7.1. EPSS: 0.4% chance of exploitation in the next 30 days.

rpcbind 0.2.0 allows local users to write to arbitrary files or gain privileges via a symlink attack on (1) /tmp/portmap.xdr and (2) /tmp/rpcbind.xdr.

Affected products

Published 2019-10-29. Last modified 2026-06-16.