COMMAND

    rpc.ugidd(8)

SYSTEMS AFFECTED

    Systems running rpc.ugidd(8).

PROBLEM

    The ugidd  interface specifies  a call  that maps  a given  uid or
    gid to a user  or group name.   This lets others collect  all user
    names on your host by simply looping through the uid space.

    Note that  although nfsd  version 2.0  and later  does not support
    the  ugid  protocol  anymore,  the  server  is  still shipped with
    current distributions.

SOLUTION

    Immediate fix: kill off rpc.ugidd  and make sure it isn't  started
    from rc.inet2.