CVE-2005-1037: Undefined Security Weakness

Unknown vulnerability in AIX 5.3.0, when configured as an NIS client, allows remote attackers to gain root privileges...

CVE-2002-1232

CVE-2002-1232 describes a memory leak in ypserv’s ypdb_open (yp_db.c) affecting the NIS package prior to version 2.5. Repeated remote requests for non-existent maps can exhaust memory, causing a denial-of-service condition. Multiple vendor advisories document this issue (e.g., Mandrake MDKSA-2002...

CVE-2002-1232

Memory leak in ypdbopen in ypdb.c for ypserv before 2.5 in the NIS package 3.9 and earlier allows remote attackers to cause a denial of service memory consumption via a large number of requests for a map that does not exist...

CVE-2002-1232: Undefined Security Weakness

Memory leak in ypdbopen in ypdb.c for ypserv before 2.5 in the NIS package 3.9 and earlier allows remote attackers to cause a denial of service memory consumption via a large number of requests for a map that does not exist...

RPC NIS yppasswd Service In Use

Binary data 1026.prm...

RPC NIS ypbind Service In Use

Binary data 1024.prm...

RPC NIS nispasswd Service In Use

Binary data 1075.prm...

RPC NIS ypupdated Service In Use

Binary data 1042.prm...

RPC NIS ypserv Service In Use

Binary data 1022.prm...

RHEL 2.1 : ypserv (RHSA-2002:224)

Updated ypserv packages which fix a memory leak are now available for Red Hat Linux Advanced Server. Updated 08 Jan 2003 Added fixed packages for the Itanium IA64 architecture. Updated 06 Feb 2003 Added fixed packages for Advanced Workstation 2.1 ypserv is an NIS authentication server. ypserv...

RPC bootparamd NIS Domain Name Disclosure

Using the remote bootparamd service, it was possible to obtain the NIS domain of the network. A remote attacker could use this information to mount further attacks. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid12237; scriptversion"$Revision: 1.16 $";...

NIS passwd.byname Map Disclosure

This script fetches the remote NIS 'passwd.byname' map, provided that the NIS domain name could be obtained. C Tenable Network Security, Inc. include 'compat.inc' ; if description scriptid12238; scriptversion"1.19"; scriptcvsdate"Date: 2018/08/13 14:32:37"; scriptnameenglish:"NIS passwd.byname Ma...

CVE-2004-0375

The vulnerability CVE-2004-0375 affects SYMNDIS.SYS in multiple Symantec firewall/Norton products (Norton Internet Security, Norton Personal Firewall, Client Firewall 5.x, Client Security 1.x) where parsing TCP options can trigger an infinite loop and a denial of service. Specifically, sending a ...

Solaris NIS unauthorized passwords access

After installing 113579-03 patch any user can access secure NIS maps, for example passwd.adjunct.byname...

Solaris 9 patch 113579-03 introduces a NIS security bug

Posted to newsgroup comp.unix.solaris, and mailed to [email protected] Patch 113579-03, which has been in the recommended patch set for Solaris 9 since mid-February, introduces a security bug. If you are not running a NIS server using Solaris 9 you are not affected. If you do, but don't...

CVE-2004-1942

The Solaris 9 patches 113579-02 through 113579-05, and 114342-02 through 114342-05, prevent ypserv and ypxfrd from properly restricting access to secure NIS maps, which allows local users to use ypcat or ypmatch to extract the contents of a secure map such as passwd.adjunct.byname...

CVE-2003-0176

CVE-2003-0176 affects the IRIX Name Service Daemon (nsd) running as an NIS master on SGI IRIX 6.5.x (through 6.5.20f and possibly earlier). The vulnerability allows remote attackers to cause a denial of service (crash) by sending UDP port scans to nsd. Public sources in connected documents confir...

CVE-2003-0251

ypserv NIS server before 2.7 allows remote attackers to cause a denial of service via a TCP client request that does not respond to the server, which causes ypserv to block...

CVE-2003-0251

ypserv NIS server before 2.7 allows remote attackers to cause a denial of service via a TCP client request that does not respond to the server, which causes ypserv to block...

Important: Red Hat Security Advisory: : : : Updated ypserv packages fix various vulnerabilities

Updated ypserv packages which fix a denial of service DoS vulnerability and a memory leak are now available for Red Hat Linux on IBM iSeries and pSeries systems. The ypserv package contains the Network Information Service NIS server. For ypserv versions before 2.5 it was discovered that a memory...