• info
• discussion
• exploit
• solution
• references

SunOS rpc.mountd Vulnerability

If an access list of hosts within /etc/exports is a string over 256 characters then the filesystem can be mounted by unauthorized remote hosts.

This is Sun Bug ID 1048890.