# CVE-1999-1225: Linux and Ultrix Information Disclosure in rpc.mountd

Source: https://junglewise.ai/threats/cve-1999-1225-linux-and-ultrix-information-disclosure-in-rpc-mountd  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 1997-08-24. Updated: 2026-05-10  
License: CC BY 4.0 with a link back

CVE-1999-1225 · Severity: medium · CVSS 5 · Published 1997-08-24

A vulnerability in the rpc.mountd service, which manages network file sharing, allows remote individuals to probe a server for specific files. By attempting to mount a file, an attacker can determine if it exists based on the error messages returned by the system. This information disclosure can be used to map out sensitive file locations or verify the presence of specific software and configurations on the target system.

Technologies: [Digital Ultrix](https://junglewise.ai/threats/technologies/ultrix), [Linux Kernel](https://junglewise.ai/threats/technologies/kernel), [Netbsd](https://junglewise.ai/threats/technologies/netbsd), [Openbsd](https://junglewise.ai/threats/technologies/openbsd). Vendors: [Digital](https://junglewise.ai/threats/vendors/digital), [Linux](https://junglewise.ai/threats/vendors/linux), [Netbsd](https://junglewise.ai/threats/vendors/netbsd), [OpenBSD](https://junglewise.ai/threats/vendors/openbsd).

## Quick answers

**Is CVE-1999-1225 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-1999-1225 being exploited in the wild.

**How severe is CVE-1999-1225?** Medium severity, with a CVSS score of 5, published 24 August 1997.

**Which products and versions are affected?** Linux Foundation Linux; Digital Equipment Corporation (DEC) Ultrix.

**Is there a fix for CVE-1999-1225?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-1999-1225 attacked?** It is attacked over the network, in an operating system.

**Am I affected by CVE-1999-1225?** Check whether you run Digital Ultrix, Linux Kernel, Netbsd or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The rpc.mountd daemon in various Unix-like operating systems is susceptible to an information disclosure vulnerability. The service returns distinct error messages when a remote user attempts to mount a path, differentiating between paths that do not exist and paths that exist but are not exported or accessible. A remote, unauthenticated attacker can exploit this behavior to conduct file enumeration across the server's filesystem. This is a side-channel attack via error message analysis that requires network access to the RPC mount service.

## Affected products

- Linux Foundation Linux
- Digital Equipment Corporation (DEC) Ultrix

## Timeline

- 1997-08-24: disclosed

## References

- [http://www.securityfocus.com/archive/1/7526](http://www.securityfocus.com/archive/1/7526)
- [https://exchange.xforce.ibmcloud.com/vulnerabilities/347](https://exchange.xforce.ibmcloud.com/vulnerabilities/347)

## Related threats

- [Linux IOMMU page table logic error in arm_lpae_split_blk_unmap](https://junglewise.ai/threats/cve-2026-56934-in-arm-lpae-split-blk-unmap-of-drivers-iommu-io-pgtable-arm)
- [Linux kernel null pointer dereference in TCP established lookup](https://junglewise.ai/threats/cve-2026-99288-in-the-linux-kernel-the-following-vulnerability-has-been-resolved)
- [Linux kernel xen-netback race condition in XenBus disconnect](https://junglewise.ai/threats/cve-2026-99286-in-the-linux-kernel-the-following-vulnerability-has-been-resolved)
- [Linux kernel shared-frag flag loss in skb_zerocopy](https://junglewise.ai/threats/cve-2026-99284-in-the-linux-kernel-the-following-vulnerability-has-been-resolved)
- [Linux kernel netfilter conntrack TCP RST timeout handling](https://junglewise.ai/threats/cve-2026-99283-in-the-linux-kernel-the-following-vulnerability-has-been-resolved)