CVE-1999-0632

CVE-1999-0632 corresponds to the RPC portmapper service. The connected documents confirm the RPC portmapper is running and that the vulnerability is described as a privilege-escalation issue affecting confidentiality, integrity, and availability in various environments (e.g., F5 BIG-IP advisories...

CVE-1999-0795

CVE-1999-0795 concerns the NIS+ rpc.nisd server, which is affected by an unauthenticated remote RPC-call execution vulnerability. The Red Hat and NVD records describe that remote attackers can trigger certain RPC calls to obtain system information, disable logging, or modify caches via the NIS+ s...

CVE-1999-0195

Denial of service in RPC portmapper allows attackers to register or unregister RPC services or spoof RPC services using a spoofed source IP address such as 127.0.0.1...

CVE-1999-0656

The CVE-1999-0656 issue affects the ugidd RPC interface and allows remote enumeration of valid usernames by querying arbitrary UIDs mapped to local user/group names. Connected documents indicate affected kernel packages in Linux distributions (e.g., CBL Mariner and Red Hat-sourced advisories) wit...

CVE-1999-0632

The RPC portmapper service is running...

CVE-1999-0795

The NIS+ rpc.nisd server allows remote attackers to execute certain RPC calls without authentication to obtain system information, disable logging, or modify caches...

CVE-1999-0078

CVE-1999-0078 affects pcnfsd (rpc.pcnfsd). The vulnerability allows local users to change file permissions or execute arbitrary commands via arguments in the RPC call. Practical impact is limited to local-privilege abuse as described in multiple sources, with no public fixes reported in the docum...

CVE-1999-0195

Summary (CVE-1999-0195) : This is a DoS in the RPC portmapper where attackers can register/unregister RPC services or spoof services using a spoofed source IP (e.g., 127.0.0.1). Multiple connected records corroborate the behaviour, including Red Hat and SUSE advisories. The exact affected product...

CVE-2000-0114

Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the /vtibin/ virtual directory...

CVE-1999-0974

Buffer overflow in Solaris snoop allows remote attackers to gain root privileges via GETQUOTA requests to the rpc.rquotad service...

CVE-1999-0969

The Windows NT RPC service allows remote attackers to conduct a denial of service using spoofed malformed RPC packets which generate an error message that is sent to the spoofed host, potentially setting up a loop, aka Snork...

CVE-1999-0969

CVE-1999-0969 affects the Windows NT RPC service. A remote attacker can trigger a denial-of-service by sending spoofed malformed RPC packets that cause the service to emit an error message back to the spoofed host, potentially creating a loop (the Snork vulnerability). The available documents ide...

CVE-1999-0687

Technical details (affected product/version, impact, remediation) are not publicly available in the provided documents. Monitor for updates from authoritative sources.

CVE-1999-1127

Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, which allows remote attackers to cause a denial of service resource exhaustion via a series of connections containing malformed data, aka the "Named Pipes Over RPC" vulnerability...

Sun Solaris 7.0 - rpc.ttdbserver Denial of Service

// source: https://www.securityfocus.com/bid/811/info It is possible to crash rpc.ttdbserver by using the old tddbserver buffer overflow exploit. This problem is caused by a NULL pointer being dereferenced when rpc function 15 is called with garbage. You cannot make rpc.ttdbserver execute arbitra...

CVE-1999-0208

rpc.ypupdated NIS allows remote users to execute arbitrary commands...

CVE-1999-0228

Denial of service in RPCSS.EXE program RPC Locator in Windows NT...

nmap.txt

Subject: Re: CERT Summary CS-99-03 To: [email protected] From the CERT Summary released yesterday: 1. RPC Vulnerabilities We have received many reports of exploitations involving three RPC vulnerabilties. Such exploitations can lead to root compromise on systems that implement these RPC...

ttsession_vuln.txt

Subject: Vulnerability in ttsession To: [email protected] Hello, I discovered the following security problem in ttsession, part of CDE: Description ----------- The ToolTalk session daemon ttsession does not properly check client credentials. Impact ------ The insufficient check can lead t...

rpc_vulnerability.txt

Subject: Auditing for RPC vulnerabilities? Use BASS To: [email protected] On Wed, Sep 01, 1999 at 09:44:26PM -0400, Fyodor wrote: Further, it can be painful to locate and 'rpcinfo' every host on a large network. BASS includes RPC support, and was designed with bulk in mind It was develope...