RPC: Null taddr2uaddr Portmap Request
This signature detects attempts to exploit a known vulnerability against portmap. Avaya Proactive Contact 3.0, HP HP-UX B.11.11, HP HP-UX B.11.23, Sun Solaris 8, Sun Solaris 8 x86, Sun Solaris 9, Sun Solaris 9 x86 are vulnerable. A SUNRPC portmap 'taddr2uaddr' request is made with a null data value. A successful attack can result in a denial-of-service condition.
Extended Description
The Solaris operating system is prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash the 'rpcbind(1M)' server, denying service to legitimate users.
Affected Products
Nortel_networks self-service_mps_500,Avaya proactive_contact
Short Name
RPC:NULL-TADDR2UADDR
Severity
Minor
Recommended
False
Recommended Action
None
Category
RPC
Keywords
CVE-2007-0165 Null Portmap Request bid:21964 taddr2uaddr
Release Date
01/28/2009
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3339
False Positive
Unknown
Vendors
Libtirpc
Sun
Avaya
Red_hat
Nortel_networks
CVSS Score
7.8