Re: [SNI-14]: Solaris rpcbind vulnerability

William Lewis (wiml@OMNIGROUP.COM)
Sun, 08 Jun 1997 02:23:23 -0700

Messages sorted by: [ date ][ thread ][ subject ][ author ]
Next message: nate: "Stack Smashing Web Page"
Previous message: Dmitry Kohmanyuk: "Re: [SNI-14]: Solaris rpcbind vulnerability"
Maybe in reply to: Oliver Friedrichs: "[SNI-14]: Solaris rpcbind vulnerability"
Next in thread: Theo de Raadt: "Re: [SNI-14]: Solaris rpcbind vulnerability"

"James W. Abendschan" <jwa@JAMMED.COM> writes:
> Now the *real* trick is figuring out how to get Solaris NFS to give up
> its export list over another high-numbered port..

I just tried this (SunOS 5.5) and I can call various mount procedures,
including DUMP and EXPORT, via PMAPPROC_CALLIT on port 32771. I can't
call MOUNTPROC_MNT, though...

Next message: nate: "Stack Smashing Web Page"
Previous message: Dmitry Kohmanyuk: "Re: [SNI-14]: Solaris rpcbind vulnerability"
Maybe in reply to: Oliver Friedrichs: "[SNI-14]: Solaris rpcbind vulnerability"
Next in thread: Theo de Raadt: "Re: [SNI-14]: Solaris rpcbind vulnerability"