[SAC] [support.osuosl.org #29762] osgeo6.osgeo.osuosl.org portmapper vulnerability

Martin Spott Martin.Spott at mgras.net
Sat May 12 01:14:59 PDT 2018


On Fri, May 11, 2018 at 02:31:10PM -0700, Cody Holliday via RT wrote:

> osgeo6.osgeo.osuosl.org is still vulnerable to portmapper amplification
> attacks! Please use the provided materials to secure your host.

Unfortunately I missed the previous notion of this issue.

I've now removed portmap/rpcbind from all OSGeo machines I have access to -
"download" and "osgeo6" were affected.

Thanks for reminding,

	Martin
-- 
 Unix _IS_ user friendly - it's just selective about who its friends are !
--------------------------------------------------------------------------


More information about the Sac mailing list