rpc_vulnerability.txt

Subject: Auditing for RPC vulnerabilities? Use BASS To: [email protected] On Wed, Sep 01, 1999 at 09:44:26PM -0400, Fyodor wrote: Further, it can be painful to locate and 'rpcinfo' every host on a large network. BASS includes RPC support, and was designed with bulk in mind It was develope...

CVE-1999-0687

The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to execute commands...

RPC bootparamd Service Information Disclosure (Deprecated)

The bootparamd RPC service is running. It is used by diskless clients to get the necessary information needed to boot properly. If an attacker uses the BOOTPARAMPROCWHOAMI and provides the correct address of the client, then he will get its NIS domain back from the server. Once the attacker...

NIS Server Detection

The remote host is an NIS Network Information Service server. NIS is used to share usernames, passwords, and other sensitive information among the hosts claiming to be within a given NIS domain and passes this information over the network unencrypted. C Tenable Network Security, Inc...

CDE RPC tooltalk Service Multiple Overflows

The tooltalk RPC service is running. A possible implementation fault in the ToolTalk object database server may allow an attacker to execute arbitrary commands as root. This warning may be a false positive since the presence of this vulnerability is only accurately identified with local access. C...

RPC portmapper Service Detection

The RPC portmapper is running on this port. The portmapper allows someone to get the port number of each RPC service running on the remote host by sending either multiple lookup requests or a DUMP request. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10223;...

RPC alis Service Detection

The alis RPC service is running. If you do not use this service, then you should disable it as it may become a security threat in the future, if a vulnerability is discovered. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10210; scriptversion"1.22";...

RPC database Service Detection

The database RPC service is running. If you do not use this service, then you should disable it as it may become a security threat in the future, if a vulnerability is discovered. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10214; scriptversion"1.22";...

RPC etherstatd Service Detection

The etherstatd RPC service is running. If you do not use this service, then you should disable it as it may become a security threat in the future, if a vulnerability is discovered. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10215; scriptversion"1.22";...

3270 Mapper Service Detection

The 3270 mapper RPC service is running. If you do not use this service, then you should disable it as it may become a security threat in the future, if a vulnerability is discovered. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10208; scriptversion"1.22";...

RPC rstatd Service Detection

The remote host is running the rstatd RPC service. This service provides information such as : - the CPU usage - the system uptime - the network usage C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10227; scriptversion"1.34"; scriptcvsdate"Date: 2019/10/04 16:48:26";...

rquotad Service Detection

The rquotad RPC service is running. If you do not use this service, then disable it as it may become a security threat in the future, if a vulnerability were to be discovered. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10226; scriptversion"1.27";...

kki.rpc.libc.DoS.txt

Date: Wed, 14 Apr 1999 15:26:14 +0200 From: Lukasz Luzar To: [email protected] Subject: KKIS.08041999.001.b - security raport - flaws in rpc part of libc S E C U R I T Y Contacts KKI Security Team Cracow Commercial Internet, Poland http://www.security.kki.pl http://www.kki.pl...

CVE-1999-0493

rpc.statd allows remote attackers to forward RPC calls to the local operating system via the SMMON and SMNOTIFY commands, which in turn could be used to remotely exploit other bugs such as in automountd...

Sun Solaris 2.5.1 - rpc.statd rpc Call Relaying

Sun Solaris 2.5.1 - rpc.statd rpc Call Relaying // source: https://www.securityfocus.com/bid/450/info The rpc service rpc.statd, shipped with all major versions of Sun's solaris, is the status monitoring service for NFS file locking. The vulnerability lies in rpc.statd's ability to relay rpc call...

Sun Solaris 2.5.1 - rpc.statd rpc Call Relaying

// source: https://www.securityfocus.com/bid/450/info The rpc service rpc.statd, shipped with all major versions of Sun's solaris, is the status monitoring service for NFS file locking. The vulnerability lies in rpc.statd's ability to relay rpc calls to other rpc services without being validated ...

CVE-1999-0613

The rpc.sprayd service is running...

CVE-1999-0656

The ugidd RPC interface, by design, allows remote attackers to enumerate valid usernames by specifying arbitrary UIDs that ugidd maps to local user and group names...

CVE-1999-0632

The RPC portmapper service is running...

AZL-34842 CVE-1999-0656 affecting package kernel for versions less than 6.6.35.1-4

The ugidd RPC interface, by design, allows remote attackers to enumerate valid usernames by specifying arbitrary UIDs that ugidd maps to local user and group names...