CVE-1999-0300: Undefined Security Weakness

niscachemgr for Solaris NIS+ allows attackers to add malicious NIS+ servers...

RPC bootparamd Service Information Disclosure (Deprecated)

The bootparamd RPC service is running. It is used by diskless clients to get the necessary information needed to boot properly. If an attacker uses the BOOTPARAMPROCWHOAMI and provides the correct address of the client, then he will get its NIS domain back from the server. Once the attacker...

NIS Server Detection

The remote host is an NIS Network Information Service server. NIS is used to share usernames, passwords, and other sensitive information among the hosts claiming to be within a given NIS domain and passes this information over the network unencrypted. C Tenable Network Security, Inc...

SGI IRIX 6.5.2 - nsd Information Gathering

SGI IRIX 6.5.2 - nsd Information Gathering / source: https://www.securityfocus.com/bid/412/info A vulnerability has been discovered in the nsd service, as included by SGI in Irix 6.5.x. The vulnerability allows remote users to access potentially sensitive pieces of information, including, but not...

SGI IRIX 6.5.2 - 'nsd' Information Gathering

/ source: https://www.securityfocus.com/bid/412/info A vulnerability has been discovered in the nsd service, as included by SGI in Irix 6.5.x. The vulnerability allows remote users to access potentially sensitive pieces of information, including, but not limited to, NIS map information, shadow...

CVE-1999-0653

A component service related to NIS+ is running...

PT-1999-1246 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A component service related to NIS+ is running. Recommendations: At the moment, there is no information about a newer version that contains a fix for this issue...

CVE-1999-1025

CDE screen lock program screenlock on Solaris 2.6 does not properly lock an unprivileged user's console session when the host is an NIS+ client, which allows others with physical access to login with any string...

CVE-1999-0797

NIS finger allows an attacker to conduct a denial of service via a large number of finger requests, resulting in a large number of NIS queries...

CVE-1999-0008

Buffer overflow in NIS+, in Sun's rpc.nisd program...

CVE-1999-0795

The NIS+ rpc.nisd server allows remote attackers to execute certain RPC calls without authentication to obtain system information, disable logging, or modify caches...

PT-1998-1107 · Sun · Rpc.Nisd Server

Name of the Vulnerable Software and Affected Versions: NIS+ rpc.nisd server affected versions not specified Description: The issue allows remote attackers to execute certain RPC calls without authentication, potentially obtaining system information, disabling logging, or modifying caches...

CVE-1999-1426

Solaris Solstice AdminSuite AdminSuite 2.1 follows symbolic links when updating an NIS database, which allows local users to overwrite arbitrary files...

CVE-1999-1424

Solaris Solstice AdminSuite AdminSuite 2.1 uses unsafe permissions when adding new users to the NIS+ password table, which allows local users to gain root access by modifying their password table entries...

CVE-1999-1425

Solaris Solstice AdminSuite AdminSuite 2.1 incorrectly sets write permissions on source files for NIS maps, which could allow local users to gain privileges by modifying /etc/passwd...

CVE-1999-0300

niscachemgr for Solaris NIS+ allows attackers to add malicious NIS+ servers...

CVE-1999-1419

Buffer overflow in nssnisplus.so.1 library in NIS+ in Solaris 2.3 and 2.4 allows local users to gain root privileges...

CVE-1999-0521

An NIS domain name is easily guessable...

CVE-1999-0522

The permissions for a system-critical NIS+ table e.g. passwd are inappropriate...

PT-1996-1046 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue concerns inappropriate permissions for system-critical NIS+ tables, such as the passwd table. Recommendations: At the moment, there is no information about a newer version tha...