Solaris rpc.yppasswdd does not adequately check input allowing users to execute arbitrary code

Overview A remotely exploitable buffer overflow exists in the 'rpc.yppasswd' service on Solaris 2.6, 2.7, and 2.8. Description Network Information Service NIS provides a simple network lookup service consisting of databases and processes. Its purpose is to provide information, that has to be know...

CVE-1999-1025

CDE screen lock program screenlock on Solaris 2.6 does not properly lock an unprivileged user's console session when the host is an NIS+ client, which allows others with physical access to login with any string...

CVE-1999-1425

CVE-1999-1425 affects Solaris Solstice AdminSuite (AdminSuite) 2.1. The documented issue is that NIS map source files have incorrect write permissions, enabling local users to modify /etc/passwd and potentially gain privileges. The connected documents do not expand on root cause beyond the stated...

CVE-1999-1025

The CVE-1999-1025 issue affects Solaris 2.6 where the CDE screen lock program (screenlock) fails to lock an unprivileged user’s console session when the host is an NIS+ client, enabling anyone with physical access to login using arbitrary strings. Affected component: CDE screenlock on Solaris 2.6...

CVE-1999-1425

Solaris Solstice AdminSuite AdminSuite 2.1 incorrectly sets write permissions on source files for NIS maps, which could allow local users to gain privileges by modifying /etc/passwd...

CVE-1999-1424

Technical details (affected products/versions/root cause/mitigation) are not provided in the supplied connected documents; monitor for updates.

CVE-1999-1424

Solaris Solstice AdminSuite AdminSuite 2.1 uses unsafe permissions when adding new users to the NIS+ password table, which allows local users to gain root access by modifying their password table entries...

CVE-1999-1426

Solaris Solstice AdminSuite AdminSuite 2.1 follows symbolic links when updating an NIS database, which allows local users to overwrite arbitrary files...

CVE-1999-1426

The CVE-1999-1426 entry describes a local privilege impact in Solaris Solstice AdminSuite 2.1, where the updater for the NIS database follows symbolic links, allowing a local user to overwrite arbitrary files. The provided documents do not specify affected build versions beyond AdminSuite 2.1, no...

OpenServer 5.0.55.0.6 HP-UX 1011 Solaris 2.67.08 - rpc.yppasswdd Buffer Overrun

OpenServer 5.0.55.0.6 HP-UX 1011 Solaris 2.67.08 - rpc.yppasswdd Buffer Overrun source: https://www.securityfocus.com/bid/2763/info The rpc.yppasswdd server is used to handle password change requests from yppasswd and modify the NIS password file. A buffer overrun vulnerability has been discovere...

Переполнение буфера в NIS (hostname lookup)

При ответе сервера не проверяется длина адреса, что позволяет переполнить статический буфер...

Security Advisory 2000-012

-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2000-012 ================================= Topic: buffer overflow in NIS hostname lookup code Version: 1.4.x: All versions prior to 1.4.3 fix will be in 1.4.3 1.5ALPHA: prior to June 30, 2000 fix will be in 1.5 current: prior to June 30,...

Дырка в NIS (ypbind)

Ошибка форматной строки в ypbind, возможные переполнения буфера...

[SECURITY] New version of nis released

Package : nis Problem type : local exploit Debian-specific: no The version of nis as distributed in Debian GNU/Linux 2.1 and 2.2 contains an ypbind package with a security problem. ypbind is used to request information from a nis server which is then used by the local machine. The logging code in...

[SECURITY] New version of nis released

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman October 14, 2000 - ------------------------------------------------------------------------ Package : nis Problem type : local...

CVE-2000-0356

Summary: CVE-2000-0356 affects PAM in Red Hat Linux 6.1, where access to disabled NIS accounts is not properly locked. The entry provides no vendor patch/version details or explicit remediation. The CVSSv2 metrics indicate a local, low-complexity flaw with partial confidentiality, integrity, and ...

CVE-2000-0356

Pluggable Authentication Modules PAM in Red Hat Linux 6.1 does not properly lock access to disabled NIS accounts...

CVE-1999-0797

NIS finger allows an attacker to conduct a denial of service via a large number of finger requests, resulting in a large number of NIS queries...

CVE-1999-0797

CVE-1999-0797 involves the NIS finger service, where an attacker can cause a denial of service by issuing a high volume of finger requests, which leads to a flood of NIS queries. The connected documents reiterate the same description across Red Hat and CVE lists, with no concrete details about af...

CVE-1999-0653

Technical details are not publicly available in the provided documents. Monitor for updates from Red Hat, NVD, and related sources to obtain affected components, root cause, and remediation information.