[linux-security] Re: portmap vulnerability?

[wietse porcupine org (Wietse Venema)]

Sam Quigley:
> 
> Are there any known vulnerabilities in portmap (redhat's
> portmap-4.0-7b)?  I've been receiving a lot of attempts to access the
> portmap port on some linuxppc machines I administer by various
> machines which clearly have no business with mine, and I wonder if
> this is an attempt to break in to my machines.

Reportedly, there's an automated tool that looks for vulnerable
RPC daemons.

The portmapper is a dictionary service. RPC daemons register with
the portmapper. That's how the attacker finds them.

	Wietse