Re: RPC protocol problem?

[econrad () bu edu (Eric Conrad)]

> I don't know of any security problem in IRIX 4.X portmapper, perhaps in 5.2?

The IRIX 4.X portmapper is vulnerable, even with the 
/usr/etc/portmap.options stuff turned on.  Haven't check IRIX 5.X yet, 
but will soon.

So here are the options so far:

Workaround -- all OSes: stop machines exporting to themselves. 

Fixes:

SunOS 4.1.X: Wietse's portmapper
Ultrix:      Wietse's portmapper   
Solaris:     Wietse's rpcbind
IRIX 4.X:    ???
IRIX 5.X:    ???
AIX:         ???

Please email me with any additions to this list, or any porting info for 
getting Wietse's programs to compile under different OSes.  I will post a 
summary.

                             ...Eric