CVE-1999-0795

CVE-1999-0795 concerns the NIS+ rpc.nisd server, which is affected by an unauthenticated remote RPC-call execution vulnerability. The Red Hat and NVD records describe that remote attackers can trigger certain RPC calls to obtain system information, disable logging, or modify caches via the NIS+ s...

CVE-1999-0795

The NIS+ rpc.nisd server allows remote attackers to execute certain RPC calls without authentication to obtain system information, disable logging, or modify caches...

CVE-1999-0620

This CVE entry is rejected/not used and does not represent an active vulnerability entry.

CVE-1999-0522

The permissions for a system-critical NIS+ table e.g. passwd are inappropriate...

CVE-1999-0521

An NIS domain name is easily guessable...

CVE-1999-0521

Technical details about CVE-1999-0521 are not publicly provided in the supplied documents. Monitor for updates; information about affected products, root cause, and fixes may be published later.

CVE-1999-0522

The CVE-1999-0522 issue concerns inappropriate permissions on a system-critical NIS+ table (e.g., passwd). The Red Hat entry repeats the same description, indicating the root cause is improper permissions on NIS+ tables. The NVD entry lists a high impact with confidentiality, integrity, and avail...

[SECURITY] New version of nis released

The nis package that was distributed with Debian GNU/Linux 2.1 has a couple of problems: ypserv allowed any machine in the NIS domain to insert new tables rpc.yppasswd had a bufferoverflow in its MD5 code rpc.yppasswd allowed users to change the GECOS and loginshell entries of other users This ha...

[SECURITY] New version of nis released

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman October 28, 1999 - ------------------------------------------------------------------------ The nis package that was distributed...

CVE-1999-0008

Buffer overflow in NIS+, in Sun's rpc.nisd program...

CVE-1999-0300

niscachemgr for Solaris NIS+ allows attackers to add malicious NIS+ servers...

CVE-1999-0312

HP ypbind allows attackers with root privileges to modify NIS data...

CVE-1999-0312

HP ypbind is identified as the affected software for CVE-1999-0312. The description states that attackers with root privileges can modify NIS data via ypbind. Connected documents reiterate the same vulnerability, but no concrete fix version or remediation is provided in the supplied materials. Th...

CVE-1999-0008

CVE-1999-0008: A buffer overflow in Sun NIS+ rpc.nisd (the remote RPC service 100300/nisd) allows a remote attacker to gain a root shell on the affected host. Multiple connected sources (OpenVAS/Nessus) describe it as a remote, network-exposed overflow with a base CVSS v2 score of 10.0 and full i...

CVE-1999-0245

Some configurations of NIS+ in Linux allowed attackers to log in as the user "+"...

CVE-1999-0245

CVE-1999-0245 concerns Linux systems using NIS+ where certain configurations allowed an attacker to log in as the user "+". The connected sources consistently describe a login-as-+ issue arising from NIS+ configuration on Linux, but do not provide precise technical details such as affected versio...

CVE-1999-0300

CVE-1999-0300 concerns nis_cachemgr for Solaris NIS+ that allows attackers to add malicious NIS+ servers. Root cause: untrusted server addition in NIS+; impact includes partial confidentiality, integrity, and availability. CVSS 2.0 base 7.5. No patch details in provided documents.

CVE-1999-0208

Summary of CVE-1999-0208 : The vulnerability affects Sun Solaris Network Information Service (NIS) service rpc.ypupdated. A command-injection flaw exists in rpc.ypupdated that occurs when processing RPC requests with an Update command whose map name contains invalid characters. This can allow a r...

RPC bootparamd Service Information Disclosure (Deprecated)

The bootparamd RPC service is running. It is used by diskless clients to get the necessary information needed to boot properly. If an attacker uses the BOOTPARAMPROCWHOAMI and provides the correct address of the client, then he will get its NIS domain back from the server. Once the attacker...

NIS Server Detection

The remote host is an NIS Network Information Service server. NIS is used to share usernames, passwords, and other sensitive information among the hosts claiming to be within a given NIS domain and passes this information over the network unencrypted. C Tenable Network Security, Inc...