Remote File Existence Disclosure in Linux and Ultrix via rpc.mountd
CVE-1999-1225
Currently unrated
What is CVE-1999-1225?
The rpc.mountd service on Linux and Ultrix operating systems is susceptible to a vulnerability that allows remote attackers to infer the existence of specific files on the server. By sending mount requests for files, attackers can trigger distinct error messages based on the presence or absence of those files. This information leak can be exploited to gather sensitive information regarding the server's file structure, potentially leading to further exploitation.