CVE-1999-1225: Medium severity Digital Ultrix vulnerability
rpc.mountd on Linux, Ultrix, and possibly other operating systems, allows remote attackers to determine the existence of a file on the server by attempting to mount that file, which generates different error messages depending on whether the file exists or not.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove the affected component from your environment.
Uninstall/remove the rpc.mountd (mount daemon) or NFS server package from systems where it is not required.
- Configuration
If NFS server/mountd functionality is not required, stop and disable the rpc.mountd (mount daemon) service on affected systems to prevent remote mount attempts.
rpc.mountd enabled = false - Compensating control
Restrict access to rpc.mountd (NFS mount service) using network controls (firewall, ACLs, or host-based rules) so only trusted hosts/networks can contact the service; block mountd-related ports from untrusted networks.
- Operational
Monitor and audit system and NFS logs for mount attempts and anomalous mount-related error messages that could indicate attempts to probe for file existence; investigate and remediate suspicious activity.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1225?
CVE-1999-1225 is considered a moderate security vulnerability since it allows attackers to infer the existence of files on the server.
What types of systems are affected by CVE-1999-1225?
CVE-1999-1225 affects Linux, Ultrix, NetBSD, OpenBSD, and Oracle Solaris systems.
How do I fix CVE-1999-1225?
To fix CVE-1999-1225, configure the rpc.mountd service properly to restrict access and prevent information leakage.
Can CVE-1999-1225 be exploited remotely?
Yes, CVE-1999-1225 can be exploited by remote attackers who can attempt to mount files.
What kind of information can attackers gain from CVE-1999-1225?
Attackers can determine the existence of specific files on the server through varying error messages generated by the rpc.mountd service.