NIS : bootparamd service

Búsqueda de Vulnerabilidad		Buscar 324607 Descripciones CVE y 145615 Descripciones de Pruebas, accesos 10,000+ referencias cruzadas.
	Pruebas CVE Todos

ID de Prueba: 1.3.6.1.4.1.25623.1.0.10031

Categoría: NIS

Título: bootparamd service

Resumen: NOSUMMARY

Descripción: Description:

The bootparamd RPC service is running.
It is used by diskless clients to get
the necessary information needed to
boot properly.

If an attacker uses the BOOTPARAMPROC_WHOAMI
and provides the correct address of the client,
then he will get its NIS domain back from
the server. Once the attacker discovers the NIS domain
name, it may easily get your NIS password
file.

Solution : filter incoming traffic to prevent connections
to the portmapper and to the bootparam daemon,
or deactivate this service if you do not use it.

Risk factor : High

Referencia Cruzada: Common Vulnerability Exposure (CVE) ID: CVE-1999-0647

Copyright This script is Copyright (C) 1999 Renaud Deraison

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.
Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.

ID de Prueba:	1.3.6.1.4.1.25623.1.0.10031
Categoría:	NIS
Título:	bootparamd service
Resumen:	NOSUMMARY
Descripción:	Description: The bootparamd RPC service is running. It is used by diskless clients to get the necessary information needed to boot properly. If an attacker uses the BOOTPARAMPROC_WHOAMI and provides the correct address of the client, then he will get its NIS domain back from the server. Once the attacker discovers the NIS domain name, it may easily get your NIS password file. Solution : filter incoming traffic to prevent connections to the portmapper and to the bootparam daemon, or deactivate this service if you do not use it. Risk factor : High
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-1999-0647
Copyright	This script is Copyright (C) 1999 Renaud Deraison