CVE-1999-0493

High

Published: 07/06/1999(UTC)Updated: 16/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

4.26%

90th percentile - higher than 90% of all known CVEs

Summary

The vulnerability in rpc.statd allows remote attackers to forward RPC calls to the local operating system via the SM_MON and SM_NOTIFY commands.

Risk Assessment

Attackers could exploit this vulnerability to remotely exploit other bugs in the system, potentially leading to serious security breaches.

Recommendation

It is recommended to update the software and monitor and restrict access to RPC services.

Other vulnerabilities in rpc.statd

CVE-1999-0019Medium
CVE-1999-0019 vulnerability allows for file deletion or creation via rpc.statd due to invalid information.

Original NVD description (English source)

rpc.statd allows remote attackers to forward RPC calls to the local operating system via the SM_MON and SM_NOTIFY commands, which in turn could be used to remotely exploit other bugs such as in automountd.