Sun rpcbind

From: Nicolas Dubee (dube0866at_private)
Date: Fri Apr 10 1998 - 07:09:33 PDT

Next message: Chiaki Ishikawa: "(Q) Sun Rpcbind problem."

Previous message: Joshua J. Drake: "BIND vulnerability test program.."
Next in thread: Aaron Bornstein: "Re: Sun rpcbind"
Reply: Aaron Bornstein: "Re: Sun rpcbind"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Just for the records and as there's now a patch for this one, here is
the rpcbind feature under Solaris 2.5.x and 2.6.

When rpcbind terminates with a SIGTERM or SIGINT, it will flush the
current list of registered services to /tmp/portmap.file
/tmp/rpcbind.file, without checking for symbolic links etc...
It can then be used to trash any file on the fs.

Note that this happens only when rpcbind is explicitly killed by root
with SIGTERM or SIGINT (rebooting or shutdowning won't do it since
K??rpc sends a SIGKILL signal to rpcbind to prevent this behaviour).


later,

Nicolas Dubee
dube0866at_private

Next message: Chiaki Ishikawa: "(Q) Sun Rpcbind problem."
Previous message: Joshua J. Drake: "BIND vulnerability test program.."
Next in thread: Aaron Bornstein: "Re: Sun rpcbind"
Reply: Aaron Bornstein: "Re: Sun rpcbind"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 13:48:45 PDT