Lucene search

K
freebsdFreeBSD0AC1AACE-F7B9-11DA-9156-000E0C2E438A
HistoryMay 31, 2006 - 12:00 a.m.

ypserv -- Inoperative access controls in ypserv

2006-05-3100:00:00
vuxml.freebsd.org
19

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.124 Low

EPSS

Percentile

95.4%

Problem Description
There are two documented methods of restricting access to
NIS maps through ypserv(8): through the use of the
/var/yp/securenets file, and through the /etc/hosts.allow file.
While both mechanisms are implemented in the server, a change
in the build process caused the “securenets” access restrictions
to be inadvertantly disabled.
Impact
ypserv(8) will not load or process any of the networks or
hosts specified in the /var/yp/securenets file, rendering
those access controls ineffective.
Workaround
One possible workaround is to use /etc/hosts.allow for access
control, as shown by examples in that file.
Another workaround is to use a firewall (e.g., ipfw(4),
ipf(4), or pf(4)) to limit access to RPC functions from
untrusted systems or networks, but due to the complexities of
RPC, it might be difficult to create a set of firewall rules
which accomplish this without blocking all access to the
machine in question.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchfreebsd= 5.3UNKNOWN
FreeBSDanynoarchfreebsd< 5.3_30UNKNOWN

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.124 Low

EPSS

Percentile

95.4%

Related for 0AC1AACE-F7B9-11DA-9156-000E0C2E438A