PORTMAPPER: DUMP Call

This signature detects attempts to exploit a known vulnerability in Portmapper. Attackers can send a DUMP RPC call to the Portmap daemon to obtain a list of available RPC programs for a host. Attackers can use this list to plan future, more targeted attacks.

Extended Description

Remote intruders could exploit this vulnerability to identify services that are running on a server. Although an intruder does not break into a server at this point, the information gained could be used to execute malicious attacks on the server.

Short Name
PORTMAPPER:INFO:PORTMAP-DUMP
Severity
Minor
Recommended
False
Recommended Action
None
Category
PORTMAPPER
Keywords
Call DUMP
Release Date
05/08/2003
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3324
Port
RPC/100000
False Positive
Unknown

Found a potential security threat?