The problem seems to be about 2 years old. The vulnerability has been stated before. Yet, some vendors still have not come up with a sound solution. Rpcbind permits a remote attacker to insert and delete entries without super user status by spoofing a source address. Ironically, it inserts the entries as being owned by super user.
Consequences are terrible, to say the least.
The result is positive. Both entries have been remotely deleted by an unauthorized third party. Security Ltd. All rights reserved. Terms of Use Site Privacy Statement .