PT-1999-1172 · Rpc.Statd · Rpc.Statd

Publicado 1999-06-07 · Atualizado 2018-10-30 · CVE-1999-0493

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions rpc.statd (affected versions not specified)

Description The issue allows remote attackers to forward RPC calls to the local operating system via the SM MON and SM NOTIFY commands. This could potentially be used to remotely exploit other bugs, such as those found in automountd.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-1999-0493

Produtos afetados

Rpc.Statd

Referências · 7

• 🔥 https://exploit-db.com/exploits/19327 · Exploit
• http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/186&type=0&nav=sec.sba · Nota
• http://marc.info/?l=bugtraq&m=91547759121289&w=2 · Nota
• http://securityfocus.com/bid/450 · Nota
• http://cert.org/advisories/CA-99-05-statd-automountd.html · Correção
• https://nvd.nist.gov/vuln/detail/CVE-1999-0493 · Nota de Segurança
• http://ciac.org/ciac/bulletins/j-045.shtml · Nota