7586 matches found
CVE-1999-0493
rpc.statd allows remote attackers to forward RPC calls to the local operating system via the SMMON and SMNOTIFY commands, which in turn could be used to remotely exploit other bugs such as in automountd...
CVE-2000-0114
Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the /vtibin/ virtual directory...
CVE-2000-0114
CVE-2000-0114 affects FrontPage Server Extensions. It enables unauthenticated remote disclosure of the anonymous account name via an RPC POST to shtml.dll in the /_vti_bin/ virtual directory. The issue stems from information disclosure in FrontPage Server Extensions; no exploitation details are p...
CVE-1999-0656
The CVE-1999-0656 issue affects the ugidd RPC interface and allows remote enumeration of valid usernames by querying arbitrary UIDs mapped to local user/group names. Connected documents indicate affected kernel packages in Linux distributions (e.g., CBL Mariner and Red Hat-sourced advisories) wit...
CVE-1999-0195
Summary (CVE-1999-0195) : This is a DoS in the RPC portmapper where attackers can register/unregister RPC services or spoof services using a spoofed source IP (e.g., 127.0.0.1). Multiple connected records corroborate the behaviour, including Red Hat and SUSE advisories. The exact affected product...
CVE-1999-0795
The NIS+ rpc.nisd server allows remote attackers to execute certain RPC calls without authentication to obtain system information, disable logging, or modify caches...
CVE-1999-0795
CVE-1999-0795 concerns the NIS+ rpc.nisd server, which is affected by an unauthenticated remote RPC-call execution vulnerability. The Red Hat and NVD records describe that remote attackers can trigger certain RPC calls to obtain system information, disable logging, or modify caches via the NIS+ s...
CVE-1999-0632
CVE-1999-0632 corresponds to the RPC portmapper service. The connected documents confirm the RPC portmapper is running and that the vulnerability is described as a privilege-escalation issue affecting confidentiality, integrity, and availability in various environments (e.g., F5 BIG-IP advisories...
CVE-1999-0632
The RPC portmapper service is running...
CVE-1999-0078
CVE-1999-0078 affects pcnfsd (rpc.pcnfsd). The vulnerability allows local users to change file permissions or execute arbitrary commands via arguments in the RPC call. Practical impact is limited to local-privilege abuse as described in multiple sources, with no public fixes reported in the docum...
CVE-1999-0195
Denial of service in RPC portmapper allows attackers to register or unregister RPC services or spoof RPC services using a spoofed source IP address such as 127.0.0.1...
CVE-2000-0114
Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the /vtibin/ virtual directory...
CVE-1999-0969
The Windows NT RPC service allows remote attackers to conduct a denial of service using spoofed malformed RPC packets which generate an error message that is sent to the spoofed host, potentially setting up a loop, aka Snork...
CVE-1999-0687
Technical details (affected product/version, impact, remediation) are not publicly available in the provided documents. Monitor for updates from authoritative sources.
CVE-1999-0974
Buffer overflow in Solaris snoop allows remote attackers to gain root privileges via GETQUOTA requests to the rpc.rquotad service...
CVE-1999-0969
CVE-1999-0969 affects the Windows NT RPC service. A remote attacker can trigger a denial-of-service by sending spoofed malformed RPC packets that cause the service to emit an error message back to the spoofed host, potentially creating a loop (the Snork vulnerability). The available documents ide...
CVE-1999-1127
Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, which allows remote attackers to cause a denial of service resource exhaustion via a series of connections containing malformed data, aka the "Named Pipes Over RPC" vulnerability...
Sun Solaris 7.0 - rpc.ttdbserver Denial of Service
// source: https://www.securityfocus.com/bid/811/info It is possible to crash rpc.ttdbserver by using the old tddbserver buffer overflow exploit. This problem is caused by a NULL pointer being dereferenced when rpc function 15 is called with garbage. You cannot make rpc.ttdbserver execute arbitra...