T-002: Vulnerability in Host INtegration Server RPC Service


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) T-002: Vulnerability in Host INtegration Server RPC Service
# 1  
Old 11-13-2008
T-002: Vulnerability in Host INtegration Server RPC Service

A remote code execution vulnerability exists in the SNA Remote Procedure Call (RPC) service for Host Integration Server. An attacker could exploit the vulnerability by constructing a specially crafted RPC request. The risk is HIGH. The vulnerability could allow remote code execution. An attacker who successfully exploited this vulnerability could take complete control of an affected system.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread

3 More Discussions You Might Find Interesting

1. Solaris

RPC bind service in maintenance mode

Hi, I have an issue with RPC bind service and its failing with status 1. any help would be much appreciated. THanks (2 Replies)
Discussion started by: Yakub Humami
2 Replies

2. Solaris

NFS write failed for server.....error 11 (RPC: Server can't decode arguments)

Hello! I have a Linux nfs server (called server100 below) with a export nfs. My problem is that the Solaris client (called client100 below) doesn't seems to like it. In the Solaris syslog I got following messages (and after a while the solaris client behave liked its hanged/to buzy). Also see... (3 Replies)
Discussion started by: sap4ever
3 Replies

3. UNIX for Dummies Questions & Answers

RPC service

Hi All, How can I add RPC service in SCO 5.0.7. I did not find in the sco cd please help me Alice (0 Replies)
Discussion started by: alisevA3
0 Replies
Login or Register to Ask a Question
rpc(3)							     Library Functions Manual							    rpc(3)

NAME
rpc, rpc_functions - Library routines for ONC remote procedure calls DESCRIPTION
These routines allow C programs to make procedure calls on other machines across the network. First, the client calls a procedure to send a data packet to the server. Upon receipt of the packet, the server calls a dispatch routine to perform the requested service, and then sends back a reply. Finally, the procedure call returns to the client. The RPC subroutines and macros are grouped in the following categories: Client RPC routines (described in rpc_clnt(3)) Calls a remote pro- cedure on a remote system. Broadcasts a call message to all locally connected broadcast nets. Calls the remote procedure that is associ- ated with a specified client handle. Creates a generic RPC client. Change or retrieves various information about a client object. Destroys the client's RPC handle. Frees any data allocated by the RPC/XDR system. Copies the error structure out of the client handle. Prints a message to standard error indicating why a client RPC handle could not be created. Prints a message to standard error correspond- ing to a condition. Prints a message to standard error indicating why an RPC call failed. Returns a string indicating why a client RPC handle could not be created. Returns a pointer to a string that indicates why an RPC call failed. Returns a string that indicates why an RPC call failed. Creates a toy RPC client for a remote program. Creates an RPC client that uses the TCP/IP transport. Creates an RPC client that uses the UDP/IP transport. Server RPC routines (described in rpc_svc(3)) Destroys the RPC service transport handle. Specifies the RPC service side's read file descriptor bit mask. Frees any data allocated by the RPC/XDR system. Decodes the arguments of an RPC request. Gets the network address of the caller. Services an RPC request. Services an RPC request. Maps a program with a service dis- patch procedure. Waits and services RPC requests. Send the results of a remote procedure call. Removes the mapping of program to service dispatch procedures. Processes incorrect authentication errors. Processes parameter decoding errors. Processes procedure number errors. Processes program registration errors. Processes program registration errors. Processes system errors. Processes insufficient authenti- cation errors. Creates an RPC service on top of any open descriptor. Creates a toy RPC service transport. Creates a TCP/IP-based RPC service transport. Creates a UDP/IP-based RPC service transport. RPC XDR routines (described in rpc_xdr(3)) Encodes RPC reply messages. Describes UNIX credentials. Describes RPC call header messages. Describes RPC call messages. Describes RPC authentication information messages. Describes RPC reply messages. Describes RPC reply messages. Miscellaneous RPC routines (described in rpc_misc(3)) Destroys authentication information. Creates and returns an RPC authentication handle. Creates and returns an ONC RPC authentication handle that contains authentication information. Creates and returns an ONC RPC authentication handle that contains default authentication informa- tion. Retrieves the machine's IP address. Retrieves the network name of the caller. Converts from a domain-specific host name to an operating-system independent network name. Converts from an operating-system independent network name to a domain-specific host name. Converts from an operating-system independent network name to a domain-specific user ID. Returns a list of the current RPC program-to-port mappings on the host located at a specified IP address. Returns the port number on which waits a service that supports a specified program number and transport protocol. Instructs portmap on a remote host to make an RPC call. Maps a program to a port. Destroys the mapping of a program to a port. Registers a procedure with the RPC service package. Specifies an error value that is set by an RPC client creation routine. Converts from a domain-specific user name to an operating-system independent network name. Register transport handle with ser- vice. Unregister transport handle with service. RELATED INFORMATION
rpc_clnt(3), rpc_misc(3), rpc_svc(3), rpc_xdr(3), xdr(3) Remote Procedure Calls: Protocol Specification - RFC 1050 delim off rpc(3)