PT-1997-1211 · Unknown · Rpc.Mountd

Published 1997-08-24 · Updated 2017-12-19 · CVE-1999-1225

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions rpc.mountd (affected versions not specified)

Description The issue allows remote attackers to determine the existence of a file on the server by attempting to mount that file. This is done through rpc.mountd, which generates different error messages depending on whether the file exists or not.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-1999-1225

Affected Products

Rpc.Mountd

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-1999-1225 · Security Note
• http://securityfocus.com/archive/1/7526 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/347 · Note