Bugtraq mailing list archives
Re: RPC protocol problem?
From: unkadath!shamus () pine cse nau edu (James W. Abendschan)
Date: Tue, 23 Aug 1994 14:59:32 -0700 (MDT)
I just read a post in comp.security.unix entitiled "widespread security hole in exporting of filesystems" which claims there are ways to break into a system that has filesystems exported to itself. Does anyone know anything about this? The post said "the trick is to make RPC requests via the portmapper, in such a way that they appear to the mount daemon to be coming from within the host itself." The post mentions a program that is "out there" to exploit this hole. If anyone has any knowledge of this, could you please post instructions on how to test for this.
Archie for "nfsbug", an application by Leendert Van Doorn. This will attempt to exploit assorted holes in NFS without giving the user a root shell. James -- James W. Abendschan shamus () unkadath uucp ...and he who made kittens put snakes in the grass jwa () sunset cse nau edu
Current thread:
- Re: RPC protocol problem?, (continued)
- Re: RPC protocol problem? Adam Shostack (Aug 23)
- Re: RPC protocol problem? Steinar Haug (Aug 23)
- Re: RPC protocol problem? Leif Hedstrom (Aug 23)
- Re: RPC protocol problem? Gene Spafford (Aug 23)
- Re: RPC protocol problem? Doug Davis (Aug 23)
- Re: RPC protocol problem? Pat Myrto (Aug 24)
- Re: RPC protocol problem? jsz (Aug 24)
- Re: RPC protocol problem? Doug Davis (Aug 23)
- Re: RPC protocol problem? [patch for SGI systems] Steve Kotsopoulos (Aug 23)
- Re: RPC protocol problem? [patch for Sun/Solaris systems] Luc Saccavini (Aug 24)
- Re: RPC protocol problem? Christopher Klaus (Aug 23)
- Re: RPC protocol problem? James W. Abendschan (Aug 23)
- Re: RPC protocol problem? der Mouse (Aug 24)
- Re: RPC protocol problem? prince of insufficient light (Aug 24)
- Re: RPC protocol problem? Eric Conrad (Aug 24)
- Re: RPC protocol problem? jsz (Aug 24)
- Re: RPC protocol problem? Rafi Sadowsky (Aug 24)
- Re: RPC protocol problem? Eric Conrad (Aug 25)
- Re: RPC protocol problem? Casper Dik (Aug 29)
- Re: RPC protocol problem? Casper Dik (Aug 29)
- Re: RPC protocol problem? jsz (Aug 24)
- Re: RPC protocol problem? Jukka Ukkonen (Aug 25)
- Re: RPC protocol problem? Dave Goldberg (Aug 25)