CVE-1999-0493: High severity Sun SunOS vulnerability
rpc.statd allows remote attackers to forward RPC calls to the local operating system via the SMMON and SMNOTIFY commands, which in turn could be used to remotely exploit other bugs such as in automountd.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
rpc.statdfrom your environment.If rpc.statd is not required, uninstall or remove the rpc.statd component to eliminate the vulnerable service.
- Configuration
Disable or stop the rpc.statd service to prevent forwarding of RPC calls via the SM_MON and SM_NOTIFY commands.
rpc.statd (SunOS/Oracle Solaris) enabled = false - Compensating control
Restrict access to the RPC lock-manager interfaces (SM_MON/SM_NOTIFY) and rpc.statd from untrusted networks using firewall rules or ACLs; allow only trusted hosts/networks to reach these services.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0493?
CVE-1999-0493 is considered a high severity vulnerability due to its ability to allow remote attackers to exploit the local operating system via RPC calls.
How do I fix CVE-1999-0493?
To fix CVE-1999-0493, it is recommended to apply security patches provided by Sun/Oracle for the affected SunOS and Solaris versions.
What systems are affected by CVE-1999-0493?
CVE-1999-0493 affects various versions of SunOS and Solaris, including 5.3, 5.4, and 2.4 to 2.6.
What components of the system does CVE-1999-0493 impact?
CVE-1999-0493 impacts the rpc.statd component, which can be manipulated through SM_MON and SM_NOTIFY commands.
What types of attacks can be executed using CVE-1999-0493?
CVE-1999-0493 can be leveraged by remote attackers to forward RPC calls, potentially exploiting other vulnerabilities in systems like automountd.