T-002: Vulnerability in Host INtegration Server RPC Service

Tags

host, security, server

Special Forums Cybersecurity Security Advisories (RSS) T-002: Vulnerability in Host INtegration Server RPC Service

11-13-2008

Registered User

26,240, 27

Join Date: Sep 2000

Last Activity: 1 August 2008, 3:09 PM EDT

Posts: 26,240

Thanks Given: 0

Thanked 27 Times in 26 Posts

T-002: Vulnerability in Host INtegration Server RPC Service

A remote code execution vulnerability exists in the SNA Remote Procedure Call (RPC) service for Host Integration Server. An attacker could exploit the vulnerability by constructing a specially crafted RPC request. The risk is HIGH. The vulnerability could allow remote code execution. An attacker who successfully exploited this vulnerability could take complete control of an affected system.

More...

Linux Bot

View Public Profile for Linux Bot

Find all posts by Linux Bot

Previous Thread | Next Thread

3 More Discussions You Might Find Interesting

1. Solaris

RPC bind service in maintenance mode

Hi, I have an issue with RPC bind service and its failing with status 1. any help would be much appreciated. THanks

2. Solaris

NFS write failed for server.....error 11 (RPC: Server can't decode arguments)

Hello! I have a Linux nfs server (called server100 below) with a export nfs. My problem is that the Solaris client (called client100 below) doesn't seems to like it. In the Solaris syslog I got following messages (and after a while the solaris client behave liked its hanged/to buzy). Also see...

3. UNIX for Dummies Questions & Answers

RPC service

Hi All, How can I add RPC service in SCO 5.0.7. I did not find in the sco cd please help me Alice

LEARN ABOUT OSF1

nfsstat

nfsstat(8)						      System Manager's Manual							nfsstat(8)

NAME

       nfsstat - Network File System statistics

SYNOPSIS

       /usr/bin/nfsstat [-i interval] [-23cnsrz] [system]

OPTIONS

       Displays  summary information at the specified interval.  Displays client NFS and RPC information, unless otherwise specified by either the
       -n or -r option.  Displays server NFS and RPC information, unless otherwise specified by either the -n or -r option.  Displays  NFS  client
       and server information, unless otherwise specified by either the -c or -s option.  Displays RPC information for the client and server side,
       unless otherwise specified by either the -c or -s option.  Specifies NFS version 2 statistics when specified with the -n option. If neither
       the  -2	nor  -3  option is specified, version 2 and version 3 statistics are displayed.  Specifies NFS version 3 statistics when specified
       with the -n option. If neither the -2 nor -3 option is specified, version 2 and version 3 statistics are displayed.  Reinitializes  statis-
       tics. Used to set NFS client/server or RPC client/server statistics to zero. You must be logged in as superuser to use this command.

DESCRIPTION

       The  nfsstat command displays statistical information about the Network File System (NFS) and Remote Procedure Call (RPC) interfaces in the
       kernel (by reading /dev/kmem).  It can also be used to reinitialize this information. If no options are given, nfsstat displays both server
       RPC and NFS version 2 and version 3 information, and client RPC and NFS version 2 and version 3 information.

       The system argument specifies the file containing the system's name list.  Otherwise, /vmunix is used.

FILES

       Specifies the kernel memory.

																	nfsstat(8)

Security Advisories (RSS)