Bugtraq mailing list archives
Re: RPC protocol problem?
From: jsz () ramon bgu ac il (jsz)
Date: Thu, 25 Aug 94 3:33:25 IDT
I don't have an exploit script, but replacing your portmap with Wietse's would probably not hurt. Heres the blurb:I can Wietse's portmapper easily under SunOS, but other architectures (Solaris, Irix, etc.) will not cooperate. Does anyone have any diffs or porting info? I'll post a summary.
rpcbind "plays" role of portmapper on Solaris 2.X, and there is a secure version of it, ftp.win.tue.nl:/pub/security, rpcbind on Solaris 2.X also allows you to steal filehandes; mount daemon doesn't do reserved port checking, and once a directory is exported to the host itself you can steal the filehandle. I don't know of any security problem in IRIX 4.X portmapper, perhaps in 5.2?
Current thread:
- Re: RPC protocol problem?, (continued)
- Re: RPC protocol problem? Doug Davis (Aug 23)
- Re: RPC protocol problem? Pat Myrto (Aug 24)
- Re: RPC protocol problem? jsz (Aug 24)
- Re: RPC protocol problem? Doug Davis (Aug 23)
- Re: RPC protocol problem? [patch for SGI systems] Steve Kotsopoulos (Aug 23)
- Re: RPC protocol problem? [patch for Sun/Solaris systems] Luc Saccavini (Aug 24)
- Re: RPC protocol problem? Christopher Klaus (Aug 23)
- Re: RPC protocol problem? James W. Abendschan (Aug 23)
- Re: RPC protocol problem? der Mouse (Aug 24)
- Re: RPC protocol problem? prince of insufficient light (Aug 24)
- Re: RPC protocol problem? Eric Conrad (Aug 24)
- Re: RPC protocol problem? jsz (Aug 24)
- Re: RPC protocol problem? Rafi Sadowsky (Aug 24)
- Re: RPC protocol problem? Eric Conrad (Aug 25)
- Re: RPC protocol problem? Casper Dik (Aug 29)
- Re: RPC protocol problem? Casper Dik (Aug 29)
- Re: RPC protocol problem? jsz (Aug 24)
- Re: RPC protocol problem? Jukka Ukkonen (Aug 25)
- Re: RPC protocol problem? Dave Goldberg (Aug 25)
- Re: RPC protocol problem? Peter Wemm (Aug 25)
- Re: RPC protocol problem? Alexander Haiut (Aug 26)