CVE-1999-0493

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

rpc.statd allows remote attackers to forward RPC calls to the local operating system via the SM_MON and SM_NOTIFY commands, which in turn could be used to remotely exploit other bugs such as in automountd.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=91547759121289&w=2
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/186&type=0&nav=sec.sba
http://www.cert.org/advisories/CA-99-05-statd-automountd.htmlPatch, Third Party Advisory, US Government Resource
http://www.ciac.org/ciac/bulletins/j-045.shtml
http://www.securityfocus.com/bid/450
http://marc.info/?l=bugtraq&m=91547759121289&w=2
http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/186&type=0&nav=sec.sba
http://www.cert.org/advisories/CA-99-05-statd-automountd.htmlPatch, Third Party Advisory, US Government Resource
http://www.ciac.org/ciac/bulletins/j-045.shtml
http://www.securityfocus.com/bid/450

Timeline

Published: Jun 7, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 1999

CVE-1999-049510.0A remote attacker can gain access to a file system using .. (dot dot) when accessing SMB shares.CVE-1999-04970.0Anonymous FTP is enabled.CVE-1999-051210.0A mail server is explicitly configured to allow SMTP mail relay, which allows abuse by spammers.CVE-1999-051510.0An unrestricted remote trust relationship for Unix systems has been set up, e.g. by using a + sign in /etc/hosts.equiv.CVE-1999-05206.4A system-critical NETBIOS/SMB share has inappropriate access control.CVE-1999-05230.0ICMP echo (ping) is allowed from arbitrary hosts.CVE-1999-052710.0The permissions for system-critical data in an anonymous FTP account are inappropriate. For example, the root directory is writeable by wor CVE-1999-05287.5A router or firewall forwards external packets that claim to come from inside the network that the router/firewall is in front of.CVE-1999-05297.5A router or firewall forwards packets that claim to come from IANA reserved or private addresses, e.g. 10.x.x.x, 127.x.x.x, 217.x.x.x, etc.CVE-1999-053010.0A system is operating in "promiscuous" mode which allows it to perform packet sniffing.CVE-1999-053910.0A trust relationship exists between two Unix hosts.CVE-1999-054710.0An SSH server allows authentication through the .rhosts file.