FreeBSD Security Advisory (FreeBSD-SA-06:15.ypserv.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:15.ypserv.asc ADV FreeBSD-SA-06:15.ypserv.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Sof...

FreeBSD Security Advisory (FreeBSD-SA-06:15.ypserv.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:15.ypserv.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Gnome屏保程序NIS认证本地非授权访问漏洞

BUGTRAQ ID: 28575 CVECAN ID: CVE-2008-0887 gnome-screensaver是用于取代xscreensaver的屏保程序。 gnome-screensaver验证用户口令的方式存在漏洞，如果启用了远程NIS认证服务器的话，能够导致网络中断的本地攻击者就可以导致gnome-screensaver崩溃，这样就打开了锁定的屏幕。 GNOME gnome-screensaver 2.22.1 GNOME ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Sun Solaris NIS+未明远程拒绝服务漏洞

BUGTRAQ ID: 13552 Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Sun Solaris的rpc.nisd NIS+守护程序存在未明的远程拒绝服务漏洞，远程非特权用户可以导致受影响的守护进程崩溃，或导致进程陷入死循环，消耗CPU资源。 反复攻击可以禁用网络中的所有NIS+服务程序，导致目录服务持续的拒绝服务。最可能的结果是所有相关的服务和认证进程全部失效。 Sun Solaris 9.0x86 Sun Solaris 9.0 Sun Solaris 8.0x86 Sun Solaris 8.0 Sun Solaris 7.0x86 Sun Solar...

openSUSE 10 Security Update : gnome-screensaver (gnome-screensaver-5172)

An attacker could log in without a valid password if the NIS server is down. CVE-2008-0887 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update gnome-screensaver-5172. The text description of this...

SuSE 10 Security Update : gnome-screensaver (ZYPP Patch Number 5179)

An attacker could log in without a valid password if the NIS server is down. CVE-2008-0887 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid33251;...

openSUSE 10 Security Update : gnome-screensaver (gnome-screensaver-5175)

An attacker could log in without a valid password if the NIS server is down. CVE-2008-0887 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update gnome-screensaver-5175. The text description of this...

GLSA-200804-12 : gnome-screensaver: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-200804-12 gnome-screensaver: Privilege escalation gnome-screensaver incorrectly handles the results of the getpwuid function in the file src/setuid.c when using directory servers like NIS during a network outage, a similar issue t...

[ GLSA 200804-12 ] gnome-screensaver: Privilege escalation

Gentoo Linux Security Advisory GLSA 200804-12 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

gnome-screensaver: Privilege escalation

Background gnome-screensaver is a screensaver, designed to integrate with the Gnome desktop, that can replace xscreensaver. Description gnome-screensaver incorrectly handles the results of the getpwuid function in the file src/setuid.c when using directory servers like NIS during a network outage...

rpc.ypupdated command injection vulnerability

Added: 03/28/2008 CVE: CVE-1999-0208 BID: 1749 OSVDB: 11517 Background Network Information Service NIS is a distributed database that allows you to maintain consistent configuration files throughout your network. rpc.ypupdated is an NIS service which is responsible for duplicating information fro...

rpc.ypupdated command injection vulnerability

Added: 03/28/2008 CVE: CVE-1999-0208 BID: 1749 OSVDB: 11517 Background Network Information Service NIS is a distributed database that allows you to maintain consistent configuration files throughout your network. rpc.ypupdated is an NIS service which is responsible for duplicating information fro...

Multiple Vendor NIS rpc.ypupdated YP Map Update Arbitrary Remote Command Execution

ypupdated is part of NIS and allows a client to update NIS maps. This old command execution vulnerability was discovered and fixed in 1995. However, it is still possible to run ypupdated in insecure mode by adding the '-i' option. Anybody can easily run commands as root on this machine by...

rpc.ypupdated command injection vulnerability

Added: 03/28/2008 CVE: CVE-1999-0208 BID: 1749 OSVDB: 11517 Background Network Information Service NIS is a distributed database that allows you to maintain consistent configuration files throughout your network. rpc.ypupdated is an NIS service which is responsible for duplicating information fro...

多家厂商rpc.ypupdated远程可执行任意命令漏洞

BUGTRAQ ID: 1749 CVECAN ID: CVE-1999-0208 rpc.ypupdated RPC守护进程是Network Information Service NIS的一个组件，它使NIS客户端更新自己的NIS数据库。 rpc.ypupdated守护进程实现上存在输入验证漏洞，远程攻击者可能利用此漏洞以root用户的权限在主机上执行任意命令。 当守护进程收到一个Yello Pages的更新请求，它会调用Bource...

Debian: Security Advisory (DSA-180)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 180-1 (nis)

The remote host is missing an update to nis announced via advisory DSA 180-1. OpenVAS Vulnerability Test $Id: deb1801.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 180-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

openSUSE 10 Security Update : NetworkManager (NetworkManager-1434)

NetworkManager automatically started ypbind and autofs if the DHCP server provided a NIS server address. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update NetworkManager-1434. The text descripti...

USN-474-1: xscreensaver vulnerability

It was discovered that xscreensaver did not correctly validate the return values from network authentication systems such as LDAP or NIS. A local attacker could bypass a locked screen if they were able to interrupt network connectivity...

GLSA-200705-14 : XScreenSaver: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-200705-14 XScreenSaver: Privilege escalation XScreenSaver incorrectly handles the results of the getpwuid function in drivers/lock.c when using directory servers during a network outage. Impact : A local user can crash XScreenSave...