Re: [suse-security] rpc.statd exploit

...

Is SuSE (6.3) vulnerable to the recently published rpc.statd exploit? If so, how can I secure my system short-term? I kind of need NFS...

the fix will be released tomorrow.

Bye, Thomas

Ack. in the meanwhile, switch to unfsd. 1) rcnfsserver stop 2) set USE_KERNEL_NFSD_NUMBER="no" in /etc/rc.config 3) rcnfsserver start 4) reboot the clients because your mounts are stale. Regards, Roman Drahtmüller. -- - - | Roman Drahtmüller "Caution: Cape does not | SuSE GmbH - Security enable user to fly." | Nürnberg, Germany (Batman Costume warning label) | - -