SGI IRIX rpc.mountd Remote Denial of Service Vulnerability

Bugtraq ID:	10372
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	May 18 2004 12:00AM
Updated:	May 18 2004 12:00AM
Credit:	This issue was disclosed in an SGI advisory.
Vulnerable:	SGI IRIX 6.5.24
Not Vulnerable:

SGI IRIX rpc.mountd Remote Denial of Service Vulnerability

SGI IRIX is prone to a remote denial of service vulnerability. The issue presents itself due to an unspecified error in rpc.mountd, when the process parses certain RPC requests.

SGI IRIX 6.5.24 is affected by this issue, however, it is possible that other versions of IRIX are affected as well.

SGI IRIX rpc.mountd Remote Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

SGI IRIX rpc.mountd Remote Denial of Service Vulnerability

Solution:
SGI has released an advisory (20040503-01-P) to address this issue. Please see the referenced advisory for more information.


SGI IRIX 6.5.24

• SGI patch5602.tar
  ftp://patches.sgi.com/support/free/security/patches/6.5.24/

SGI IRIX rpc.mountd Remote Denial of Service Vulnerability

References: