Bugtraq mailing list archives

Re: [SNI-14]: Solaris rpcbind vulnerability

From: wiml () OMNIGROUP COM (William Lewis)
Date: Sun, 8 Jun 1997 02:23:23 -0700


"James W. Abendschan" <jwa () JAMMED COM> writes:

Now the *real* trick is figuring out how to get Solaris NFS to give up
its export list over another high-numbered port..


I just tried this (SunOS 5.5) and I can call various mount procedures,
including DUMP and EXPORT, via PMAPPROC_CALLIT on port 32771. I can't
call MOUNTPROC_MNT, though...

Current thread:

Re: [SNI-14]: Solaris rpcbind vulnerability, (continued)
- - Re: [SNI-14]: Solaris rpcbind vulnerability C. v. Stuckrad (Jun 05)
  - Re: [SNI-14]: Solaris rpcbind vulnerability Oliver Friedrichs (Jun 05)
    - Re: [SNI-14]: Solaris rpcbind vulnerability Theo de Raadt (Jun 06)
    - Re: [SNI-14]: Solaris rpcbind vulnerability Alan Cox (Jun 06)
    - Re: [SNI-14]: Solaris rpcbind vulnerability Dmitry Kohmanyuk (Jun 06)
    - Re: [SNI-14]: Solaris rpcbind vulnerability Theo de Raadt (Jun 08)
- Sun Security Bulletin #00141 Aleph One (Jun 05)
- Sun Security Bulletin #00142 Aleph One (Jun 05)
- Re: [SNI-14]: Solaris rpcbind vulnerability James W. Abendschan (Jun 05)
- Re: [SNI-14]: Solaris rpcbind vulnerability James W. Abendschan (Jun 06)
- Re: [SNI-14]: Solaris rpcbind vulnerability William Lewis (Jun 08)