[linux-security] Re: portmap vulnerability?

[Suchandra Thapa <soonu sl-175-44 rh uchicago edu>]

	Some versions of portmap would allow users to read/modify
their table or would forward requests as the local system.  You
might just be getting attempts to try to exploit these holes.  I 
would probably disable the portmap daemon if you don't need it.  Reading
the readme that comes with the package also gives more info on the
vulnerabilities that may be present.  

On 5 Dec 1998, Sam Quigley wrote:

> 
> Are there any known vulnerabilities in portmap (redhat's
> portmap-4.0-7b)?  I've been receiving a lot of attempts to access the
> portmap port on some linuxppc machines I administer by various
> machines which clearly have no business with mine, and I wonder if
> this is an attempt to break in to my machines.