CVE-1999-1225
MediumExploitation Probability (EPSS)
High risk75th percentile - higher than 75% of all known CVEs
Summary
The vulnerability in rpc.mountd on Linux, Ultrix, and possibly other operating systems allows remote attackers to determine the existence of a file on the server by attempting to mount that file, which generates different error messages depending on whether the file exists.
Risk Assessment
Attackers can exploit this vulnerability to gather information about the file structure on the server, potentially leading to further attacks.
Recommendation
It is recommended to restrict access to rpc.mountd and to monitor and log file mounting attempts.
Original NVD description (English source)
rpc.mountd on Linux, Ultrix, and possibly other operating systems, allows remote attackers to determine the existence of a file on the server by attempting to mount that file, which generates different error messages depending on whether the file exists or not.