rpc.mountd on Linux, Ultrix, and possibly other operating systems, allows remote attackers to determine the existence of a file on the server by attempting to mount that file, which generates different error messages depending on whether the file exists or not.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ultrix | Digital | * | * |
| Linux_kernel | Linux | 2.6.20.1 (including) | 2.6.20.1 (including) |
| Netbsd | Netbsd | 2.0.4 (including) | 2.0.4 (including) |
| Openbsd | Openbsd | * | * |
| Solaris | Sun | * | * |