This script is Copyright (C) 2003-2016 Tenable Network Security, Inc.
Arbitrary code may be run on the remote server.
The RPC library has an integer overflow in the function
An attacker may use this flaw to execute arbitrary code on this host
with the privileges your RPC programs are running with (typically root),
by sending a specially crafted request to them.
Note that this issue affects Solaris, as well as Red Hat Enterprise
Linux and Fedora.
Nessus used this flaw to crash the portmapper.
Contact the vendor for a patch.
Risk factor :
Critical / CVSS Base Score : 10.0
CVSS Temporal Score : 7.8
Public Exploit Available : true
Nessus Plugin ID: 11420 ()
Bugtraq ID: 712359365
CVE ID: CVE-2003-0028CVE-2013-1950
The cookie settings on this website are set to 'allow all cookies' to give you the very best website experience. If you continue without changing these settings, you consent to this - but if you want, you can opt out of all cookies by clicking below.