RPC rpcbind Non-standard Port Assignment Filter Bypass

Medium Nessus Plugin ID 20759


An ONC RPC portmapper is running on the remote host.


The RPC portmapper is running on this port.

The portmapper allows someone to get the port number of each RPC service running on the remote host by sending either multiple lookup requests or a DUMP request.

This service should only run on port 111. However on some operating systems it also listens on different UDP ports. This might allow an attacker to circumvent firewall rules.


Disable this service if RPC are not used, or update your firewall rules if needed.

Plugin Details

Severity: Medium

ID: 20759

File Name: rpc_portmap_port32771.nasl

Version: $Revision: 1.12 $

Type: remote

Family: RPC

Published: 2007/05/25

Modified: 2017/02/16

Dependencies: 10223

Risk Information

Risk Factor: Medium


Base Score: 4

Temporal Score: 3

Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:N/A:N

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

Vulnerability Information

Required KB Items: rpc/portmap/different_port

Exploit Available: false

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 1997/06/04

Reference Information

CVE: CVE-1999-0632, CVE-1999-0189

BID: 205

OSVDB: 8727