Package: rpcbind Version: 0.2.0-4.1 Severity: important
rpcbind in "secure" mode only allows calls from the loopback address. The check for this is "addr == loopback && port < reserved". This is too strict, why the restriction on the port? -- System Information: Debian Release: squeeze/sid APT prefers testing APT policy: (500, 'testing') Architecture: amd64 (x86_64) Kernel: Linux 2.6.32-3-amd64 (SMP w/1 CPU core) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages rpcbind depends on: ii libc6 2.11.2-2 Embedded GNU C Library: Shared lib ii libtirpc1 0.2.0-2 transport-independent RPC library ii libwrap0 7.6.q-19 Wietse Venema's TCP wrappers libra ii lsb-base 3.2-23.1 Linux Standard Base 3.2 init scrip rpcbind recommends no packages. rpcbind suggests no packages. -- no debconf information -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
