RPC rpcbind Non-standard Port Assignment Filter Bypass

Medium Nessus Plugin ID 20759

New! Vulnerability Priority Rating (VPR)

Tenable calculates a dynamic VPR for every vulnerability. VPR combines vulnerability information with threat intelligence and machine learning algorithms to predict which vulnerabilities are most likely to be exploited in attacks. Read more about what VPR is and how it's different from CVSS.

VPR Score: 5.9


An ONC RPC portmapper is running on the remote host.


The RPC portmapper is running on this port.

The portmapper allows someone to get the port number of each RPC service running on the remote host by sending either multiple lookup requests or a DUMP request.

This service should only run on port 111. However on some operating systems it also listens on different UDP ports. This might allow an attacker to circumvent firewall rules.


Disable this service if RPC are not used, or update your firewall rules if needed.

Plugin Details

Severity: Medium

ID: 20759

File Name: rpc_portmap_port32771.nasl

Version: 1.13

Type: remote

Family: RPC

Published: 2007/05/25

Updated: 2018/07/27

Dependencies: 10223

Risk Information

Risk Factor: Medium

VPR Score: 5.9

CVSS v2.0

Base Score: 4

Temporal Score: 3

Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:N/A:N

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

Vulnerability Information

Required KB Items: rpc/portmap/different_port

Exploit Available: false

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 1997/06/04

Reference Information

CVE: CVE-1999-0632, CVE-1999-0189

BID: 205