[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-security] [Raq3i] securely using rpc.statd and other rpc services



On Sat, 4 Nov 2000, Theodore Jones wrote:

> Peter,
>
> Thanks a million.  The people on this list are awesome!  I tried a :
>
>     [root@www admin]# /usr/sbin/rpcinfo -p
>
> and got:
>
>     rpcinfo: can't contact portmapper: rpcinfo: RPC: Unable to receive; errno =
> Connection reset by peer
>
> so I assume that I'm ok on this front, and not vulnerable to any of these
> rpc.statd attacks, correct?

Yep, rpc services are not running.

> Does rpc stand for "Remote Procedure Call" or something by the way?

Yep.