BID:9084

SGI rpc.mountd Unspecified Denial of Service Vulnerability

Info

SGI rpc.mountd Unspecified Denial of Service Vulnerability

Bugtraq ID:	9084
Class:	Unknown
CVE:	CVE-2003-0797
Remote:	Yes
Local:	No
Published:	Nov 21 2003 12:00AM
Updated:	Jul 12 2009 12:56AM
Credit:	This issue was announced in an SGI advisory.
Vulnerable:	SGI IRIX 6.5.22 SGI IRIX 6.5.21 m SGI IRIX 6.5.21 f SGI IRIX 6.5.21 SGI IRIX 6.5.20 m SGI IRIX 6.5.20 f SGI IRIX 6.5.20 SGI IRIX 6.5.19 m SGI IRIX 6.5.19 f SGI IRIX 6.5.19 SGI IRIX 6.5.18 m SGI IRIX 6.5.18 f SGI IRIX 6.5.18 SGI IRIX 6.5.17 m SGI IRIX 6.5.17 f SGI IRIX 6.5.16 SGI IRIX 6.5.15 SGI IRIX 6.5.14 SGI IRIX 6.5.13 SGI IRIX 6.5.12 SGI IRIX 6.5.11 SGI IRIX 6.5.10 SGI IRIX 6.5.9 SGI IRIX 6.5.8 SGI IRIX 6.5.7 SGI IRIX 6.5.6 SGI IRIX 6.5.5 SGI IRIX 6.5.4 SGI IRIX 6.5.3 SGI IRIX 6.5.2 SGI IRIX 6.5.1 SGI IRIX 6.5

Not Vulnerable:

Discussion

SGI rpc.mountd Unspecified Denial of Service Vulnerability

SGI has announced the existence of an unspecified denial of service vulnerability in rpc.mountd. The precise technical details are unknown, however it is believed that this condition could potentially be exploited to deny access to NFS services.

Exploit / POC

SGI rpc.mountd Unspecified Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solution / Fix

SGI rpc.mountd Unspecified Denial of Service Vulnerability

Solution:
SGI has released an updated security advisory (20031102-02-P) including patches to address this issue. This advisory includes updated patches 5426-5429 to address a mismatch between exportfs and rpc.mountd that was introduced in the previous patches. Please see the revised advisory for further information.

SGI IRIX 6.5.18 m