Lucene search
HistoryJun 02, 2006 - 1:02 a.m.
CVE-2006-2655
cve-2006-2655
ypserv
freebsd
access restrictions
remote attackers
nvd
6.9 Medium
AI Score
Confidence
Low
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
0.124 Low
EPSS
Percentile
95.3%
The build process for ypserv in FreeBSD 5.3 up to 6.1 accidentally disables access restrictions when using the /var/yp/securenets file, which allows remote attackers to bypass intended access restrictions.
| CPE | Name | Operator | Version |
|---|---|---|---|
| freebsd:freebsd | freebsd | eq | 5.4 |
| freebsd:freebsd | freebsd | eq | 6.1 |
| freebsd:freebsd | freebsd | eq | 5.3 |
| freebsd:freebsd | freebsd | eq | 6.0 |
Related
prion
prion
Design/Logic Flaw
2006-06-02 01:02:00
freebsd
freebsd
ypserv -- Inoperative access controls in ypserv
2006-05-31 00:00:00
openvas
openvas
FreeBSD Security Advisory (FreeBSD-SA-06:15.ypserv.asc)
2008-09-04 00:00:00
FreeBSD Security Advisory (FreeBSD-SA-06:15.ypserv.asc)
2008-09-04 00:00:00
securityvulns
securityvulns
FreeBSD Security Advisory FreeBSD-SA-06:15.ypserv
2006-06-02 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-06:15.ypserv
2006-05-31 00:00:00
6.9 Medium
AI Score
Confidence
Low
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
0.124 Low
EPSS
Percentile
95.3%
Related for CVE-2006-2655