CVE Catalog

CVE-1999-0195

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.49%

71th percentile - higher than 71% of all known CVEs

Summary

CVE-1999-0195 vulnerability affects the RPC portmapper service, allowing attackers to register or unregister RPC services and spoof RPC services using a spoofed source IP address like 127.0.0.1.

Risk Assessment

Denial of Service (DoS) attacks can disrupt the operation of RPC services within the organization, potentially affecting the availability of critical applications.

Recommendation

It is recommended to secure the RPC portmapper service by restricting access to it and monitoring RPC service registrations.

Original NVD description (English source)

Denial of service in RPC portmapper allows attackers to register or unregister RPC services or spoof RPC services using a spoofed source IP address such as 127.0.0.1.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS