CVE-2005-1591

Unknown vulnerability in NIS+ on Solaris 7, 8, and 9 allows remote attackers to cause a denial of service rpc.nisd disabled and NIS+ unavailable via unknown vectors...

CVE-2003-1149

Cross-site scripting XSS vulnerability in Symantec Norton Internet Security 2003 6.0.4.34 allows remote attackers to inject arbitrary web script or HTML via a URL to a blocked site, which is displayed on the blocked sites error page...

CVE-2004-1942

The Solaris 9 patches 113579-02 through 113579-05, and 114342-02 through 114342-05, prevent ypserv and ypxfrd from properly restricting access to secure NIS maps, which allows local users to use ypcat or ypmatch to extract the contents of a secure map such as passwd.adjunct.byname...

CVE-2004-1942

The CVE-2004-1942 issue affects Solaris 9, addressed by patches 113579-02..05 and 114342-02..05. ypserv and ypxfrd fail to properly restrict access to secure NIS maps, enabling local users to use ypcat or ypmatch to read contents of maps such as passwd.adjunct.byname. Impact aligns with Partial c...

CVE-2005-1037

Unknown vulnerability in AIX 5.3.0, when configured as an NIS client, allows remote attackers to gain root privileges...

CVE-2005-1037

The CVE entry CVE-2005-1037 concerns an unknown vulnerability in AIX 5.3.0 when configured as an NIS client that could allow remote attackers to gain root privileges. The connected sources do not provide technical details, affected subcomponents, exact root cause, exploitation method, or remediat...

CVE-2005-1037

Unknown vulnerability in AIX 5.3.0, when configured as an NIS client, allows remote attackers to gain root privileges...

CVE-2002-1232

Memory leak in ypdbopen in ypdb.c for ypserv before 2.5 in the NIS package 3.9 and earlier allows remote attackers to cause a denial of service memory consumption via a large number of requests for a map that does not exist...

CVE-2002-1232

CVE-2002-1232 describes a memory leak in ypserv’s ypdb_open (yp_db.c) affecting the NIS package prior to version 2.5. Repeated remote requests for non-existent maps can exhaust memory, causing a denial-of-service condition. Multiple vendor advisories document this issue (e.g., Mandrake MDKSA-2002...

RPC NIS nispasswd Service In Use

Binary data 1075.prm...

RPC NIS ypbind Service In Use

Binary data 1024.prm...

RPC NIS ypupdated Service In Use

Binary data 1042.prm...

RPC NIS ypserv Service In Use

Binary data 1022.prm...

RPC NIS yppasswd Service In Use

Binary data 1026.prm...

RHEL 2.1 : ypserv (RHSA-2002:224)

Updated ypserv packages which fix a memory leak are now available for Red Hat Linux Advanced Server. Updated 08 Jan 2003 Added fixed packages for the Itanium IA64 architecture. Updated 06 Feb 2003 Added fixed packages for Advanced Workstation 2.1 ypserv is an NIS authentication server. ypserv...

NIS passwd.byname Map Disclosure

This script fetches the remote NIS 'passwd.byname' map, provided that the NIS domain name could be obtained. C Tenable Network Security, Inc. include 'compat.inc' ; if description scriptid12238; scriptversion"1.19"; scriptcvsdate"Date: 2018/08/13 14:32:37"; scriptnameenglish:"NIS passwd.byname Ma...

RPC bootparamd NIS Domain Name Disclosure

Using the remote bootparamd service, it was possible to obtain the NIS domain of the network. A remote attacker could use this information to mount further attacks. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid12237; scriptversion"$Revision: 1.16 $";...

CVE-2004-0375

The vulnerability CVE-2004-0375 affects SYMNDIS.SYS in multiple Symantec firewall/Norton products (Norton Internet Security, Norton Personal Firewall, Client Firewall 5.x, Client Security 1.x) where parsing TCP options can trigger an infinite loop and a denial of service. Specifically, sending a ...

Solaris NIS unauthorized passwords access

After installing 113579-03 patch any user can access secure NIS maps, for example passwd.adjunct.byname...

Solaris 9 patch 113579-03 introduces a NIS security bug

Posted to newsgroup comp.unix.solaris, and mailed to [email protected] Patch 113579-03, which has been in the recommended patch set for Solaris 9 since mid-February, introduces a security bug. If you are not running a NIS server using Solaris 9 you are not affected. If you do, but don't...