CVE-1999-0687

Technical details (affected product/version, impact, remediation) are not publicly available in the provided documents. Monitor for updates from authoritative sources.

CVE-1999-0969

CVE-1999-0969 affects the Windows NT RPC service. A remote attacker can trigger a denial-of-service by sending spoofed malformed RPC packets that cause the service to emit an error message back to the spoofed host, potentially creating a loop (the Snork vulnerability). The available documents ide...

CVE-1999-1127

Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, which allows remote attackers to cause a denial of service resource exhaustion via a series of connections containing malformed data, aka the "Named Pipes Over RPC" vulnerability...

Sun Solaris 7.0 - rpc.ttdbserver Denial of Service

// source: https://www.securityfocus.com/bid/811/info It is possible to crash rpc.ttdbserver by using the old tddbserver buffer overflow exploit. This problem is caused by a NULL pointer being dereferenced when rpc function 15 is called with garbage. You cannot make rpc.ttdbserver execute arbitra...

CVE-1999-0208

rpc.ypupdated NIS allows remote users to execute arbitrary commands...

CVE-1999-0228

Denial of service in RPCSS.EXE program RPC Locator in Windows NT...

nmap.txt

Subject: Re: CERT Summary CS-99-03 To: [email protected] From the CERT Summary released yesterday: 1. RPC Vulnerabilities We have received many reports of exploitations involving three RPC vulnerabilties. Such exploitations can lead to root compromise on systems that implement these RPC...

rpc_vulnerability.txt

Subject: Auditing for RPC vulnerabilities? Use BASS To: [email protected] On Wed, Sep 01, 1999 at 09:44:26PM -0400, Fyodor wrote: Further, it can be painful to locate and 'rpcinfo' every host on a large network. BASS includes RPC support, and was designed with bulk in mind It was develope...

ttsession_vuln.txt

Subject: Vulnerability in ttsession To: [email protected] Hello, I discovered the following security problem in ttsession, part of CDE: Description ----------- The ToolTalk session daemon ttsession does not properly check client credentials. Impact ------ The insufficient check can lead t...

CVE-1999-0687

The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to execute commands...

RPC bootparamd Service Information Disclosure (Deprecated)

The bootparamd RPC service is running. It is used by diskless clients to get the necessary information needed to boot properly. If an attacker uses the BOOTPARAMPROCWHOAMI and provides the correct address of the client, then he will get its NIS domain back from the server. Once the attacker...

NIS Server Detection

The remote host is an NIS Network Information Service server. NIS is used to share usernames, passwords, and other sensitive information among the hosts claiming to be within a given NIS domain and passes this information over the network unencrypted. C Tenable Network Security, Inc...

CDE RPC tooltalk Service Multiple Overflows

The tooltalk RPC service is running. A possible implementation fault in the ToolTalk object database server may allow an attacker to execute arbitrary commands as root. This warning may be a false positive since the presence of this vulnerability is only accurately identified with local access. C...

RPC portmapper Service Detection

The RPC portmapper is running on this port. The portmapper allows someone to get the port number of each RPC service running on the remote host by sending either multiple lookup requests or a DUMP request. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10223;...

RPC database Service Detection

The database RPC service is running. If you do not use this service, then you should disable it as it may become a security threat in the future, if a vulnerability is discovered. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10214; scriptversion"1.22";...

RPC alis Service Detection

The alis RPC service is running. If you do not use this service, then you should disable it as it may become a security threat in the future, if a vulnerability is discovered. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10210; scriptversion"1.22";...

rquotad Service Detection

The rquotad RPC service is running. If you do not use this service, then disable it as it may become a security threat in the future, if a vulnerability were to be discovered. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10226; scriptversion"1.27";...

3270 Mapper Service Detection

The 3270 mapper RPC service is running. If you do not use this service, then you should disable it as it may become a security threat in the future, if a vulnerability is discovered. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10208; scriptversion"1.22";...

RPC rstatd Service Detection

The remote host is running the rstatd RPC service. This service provides information such as : - the CPU usage - the system uptime - the network usage C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10227; scriptversion"1.34"; scriptcvsdate"Date: 2019/10/04 16:48:26";...

RPC etherstatd Service Detection

The etherstatd RPC service is running. If you do not use this service, then you should disable it as it may become a security threat in the future, if a vulnerability is discovered. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10215; scriptversion"1.22";...