Internet-Security raven logo internet-security.com

UDP 32772

ProtocolUDP
Port32772
Labels

Synopsis

  • Sun/Oracle Solaris systems commonly expose SunRPC daemons on high dynamic ports, and UDP 32772 is frequently observed in the field.
  • rpc.ttdbserverd (ToolTalk database server, part of CDE on Solaris) is often seen listening on UDP 32772 via portmapper.
  • rpc.cmsd (Calendar Manager Service on Solaris) is also commonly mapped to UDP 32772.
  • sadmind (Solstice AdminSuite remote administration daemon on Solaris) can likewise be found on UDP 32772 on some hosts.
  • On some Unix/Linux NFS deployments, auxiliary RPC services such as rpc.mountd or rpc.statd have been observed using UDP 32772 when assigned by portmapper.
  • Security note: rpc.ttdbserverd and rpc.cmsd had widely exploited remote vulnerabilities on Solaris; attackers historically scanned high SunRPC ports (including UDP 32772) to locate and compromise these services.

Observed activity

Last 30 days Detailed chart

More information