CVE-1999-0461: Critical severity SGI IRIX vulnerability
Versions of rpcbind including Linux, IRIX, and Wietse Venema's rpcbind allow a remote attacker to insert and delete entries by spoofing a source address.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
rpcbindfrom your environment.Uninstall rpcbind from systems where it is not required to eliminate the vulnerability.
- Configuration
Disable the rpcbind service on affected hosts if it is not required (stop and disable the rpcbind/portmapper service) to prevent remote insertion/deletion via spoofed source addresses.
rpcbind enabled = false - Compensating control
Restrict network access to the rpcbind/portmapper service to trusted IPs using firewall rules or ACLs; block access from untrusted networks to mitigate exploits using spoofed source addresses.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0461?
CVE-1999-0461 is classified as a high severity vulnerability due to its potential for remote exploitation.
How do I fix CVE-1999-0461?
To resolve CVE-1999-0461, upgrade the affected rpcbind software to the latest version available.
What systems are affected by CVE-1999-0461?
CVE-1999-0461 affects versions of rpcbind on Linux, IRIX, and similar systems.
What type of vulnerability is CVE-1999-0461?
CVE-1999-0461 is a remote code execution vulnerability caused by address spoofing.
Can CVE-1999-0461 be exploited without authentication?
Yes, CVE-1999-0461 can be exploited by a remote attacker without the need for authentication.