Re: strange connection on port 111

From: Rijndal Groeber (sekure@crosswinds.net)
Date: 08/14/01


Date: Tue, 14 Aug 2001 10:03:03 +0300 (EEST)
From: Rijndal Groeber <sekure@crosswinds.net>
To: xyros <ymir2@shinbiro.com>
Subject: Re: strange connection on port 111
Message-ID: <Pine.LNX.4.31.0108141000360.682-100000@pasarel.neeraj.org>

On Tue, 14 Aug 2001, xyros wrote:

> system is redhat linux 6.2 and pormap is running without inetd. but nfs,
> r*d are not running
>
> # rpcinfo -p
> program vers proto port
> 100000 2 tcp 111 portmapper
> 100000 2 udp 111 portmapper
> 100021 1 udp 1024 nlockmgr
> 100021 3 udp 1024 nlockmgr
> 100021 1 tcp 1024 nlockmgr
> 100021 3 tcp 1024 nlockmgr
> 100024 1 udp 941 status
> 100024 1 tcp 943 status
> #
Please don't run un-needed programs. That statd in the last lines of the
rpcinfo output might be vulnerable to a well-known and largely exploited
buffer overflow. Download a patch!

-- sekure at crosswinds.net
[send mail with 'send pgp key' in the subject to get my PGP key]
["People will fight to the death for their pacifist aims." - Unknown]



Relevant Pages

  • Re: PIX & WINDOWS
    ... > Do you know how to setup PIX access-list in Windows environment. ... > protocols and port no. for services: ... PGP Key ID 0xDC831689 Key available at keyserver.pgp.com ...
    (comp.security.firewalls)
  • Re: multiple port scans: tcp/8888
    ... >Attached is part of my ipfilter log. ... Solaris AnswerBook server runs on that port. ... PGP key: http://www.prairienet.org/~dtalk/dt000823.asc ...
    (FreeBSD-Security)
  • Re: Dialog doesnt play well with Gmails smtp server
    ... Port: 995 ... Outgoing: smtp.gmail.com ... PGP key ID - DSS:0x2661A952 ... Homepage: http://www.colinjones.co.uk ICQ# 1707811 ...
    (news.software.readers)
  • Re: Exim4 + port forwarding
    ... another port for Exim (presuming it is running Exim) to listen to? ... PGP Key: 8B6E99C5 ...
    (Debian-User)
  • fixed tcp port assigned by sunrpc portmapper
    ... the tcp port is changed. ... rpcinfo -p shows: ... program vers proto port service ...
    (comp.sys.sun.admin)