PT-1999-1172 · Rpc.Statd · Rpc.Statd

Published 1999-06-07 · Updated 2018-10-30 · CVE-1999-0493

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions rpc.statd (affected versions not specified)

Description The issue allows remote attackers to forward RPC calls to the local operating system via the SM MON and SM NOTIFY commands. This could potentially be used to remotely exploit other bugs, such as those found in automountd.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-1999-0493

Affected Products

Rpc.Statd

References · 7

• 🔥 https://exploit-db.com/exploits/19327 · Exploit
• http://cert.org/advisories/CA-99-05-statd-automountd.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-1999-0493 · Security Note
• http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/186&type=0&nav=sec.sba · Note
• http://marc.info/?l=bugtraq&m=91547759121289&w=2 · Note
• http://securityfocus.com/bid/450 · Note
• http://ciac.org/ciac/bulletins/j-045.shtml · Note