CVE-1999-0168: High severity Sun Sunos vulnerability
The portmapper may act as a proxy and redirect service requests from an attacker, making the request appear to come from the local host, possibly bypassing authentication that would otherwise have taken place. For example, NFS file systems could be mounted through the portmapper despite export restrictions.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
SunOS portmapper (portmap/rpcbind)from your environment.Stop and/or uninstall the portmapper service if it is not required on the system.
- Configuration
Configure the portmapper to bind only to the loopback interface (127.0.0.1) or disable the service when not required to prevent it acting as a proxy and redirecting requests.
SunOS portmapper (portmap/rpcbind) bind_address = 127.0.0.1 or disabled - Compensating control
Restrict network access to the portmapper service from untrusted networks (e.g., block or firewall access to the portmapper/rpcbind service) so remote hosts cannot use it as a proxy.
- Operational
Audit NFS exports and currently mounted filesystems for signs of unauthorized mounts established via the portmapper; remove any unauthorized mounts and remediate export configurations as needed.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0168?
CVE-1999-0168 is considered a moderate severity vulnerability that can lead to unauthorized access due to proxy behavior from the portmapper.
How do I fix CVE-1999-0168?
To fix CVE-1999-0168, restrict access to the portmapper service and apply available patches from your software provider.
What systems are affected by CVE-1999-0168?
CVE-1999-0168 affects Sun SunOS versions 4.1.3 and 4.1.3c.
What type of attacks can be executed using CVE-1999-0168?
CVE-1999-0168 can allow an attacker to bypass authentication and mount NFS file systems that should be restricted.
Is there a workaround for CVE-1999-0168?
A workaround for CVE-1999-0168 involves configuring firewall rules to limit external access to the portmapper service.