SunOS portmap Vulnerability
BID:46
Info
SunOS portmap Vulnerability
| Bugtraq ID: | 46 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Jun 04 1992 12:00AM |
| Updated: | Jun 04 1992 12:00AM |
| Credit: | |
| Vulnerable: |
Sun SunOS 4.1.3 c Sun SunOS 4.1.3 |
| Not Vulnerable: | |
Discussion
SunOS portmap Vulnerability
Under some versions of SunOS the portmapper will forward RPC request to local daemons for remote clients, this in effect makes the outside request look like a local one because it has been handed to portampper by a local daemon. This allows a remote user to ask portmap to obtain the NIS maps from the local ypserv as well as launch other attacks such as mounting filesytems by proxy.
This is Sun Bug ID 1082319.
Under some versions of SunOS the portmapper will forward RPC request to local daemons for remote clients, this in effect makes the outside request look like a local one because it has been handed to portampper by a local daemon. This allows a remote user to ask portmap to obtain the NIS maps from the local ypserv as well as launch other attacks such as mounting filesytems by proxy.
This is Sun Bug ID 1082319.
Exploit / POC
SunOS portmap Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution / Fix
SunOS portmap Vulnerability
Solution:
Apply Sun Patch ID 100482-08.
Solution:
Apply Sun Patch ID 100482-08.
References
SunOS portmap Vulnerability
References:
References:
- Sun Patch Access Page (Sun Microsystems)
- Sun Patches List (Sun Microsystems)
- Sunsolve Online(tm) (Sun Microsystems)