Mandrake Linux Security Advisory : ypserv (MDKSA-2000:064)

A format string parsing bug exists in ypbind 3.3 if it is run in debug mode which leaks file descriptors under certain circumstances which can lead to a DoS. In addition, ypbind may suffer from buffer overflows. In the ypserv program, a buffer overflow and format bug exist if the build system doe...

CVE-2000-1042

CVE-2000-1042 affects Mandrake Linux (ypserv/ypbind). A buffer overflow in ypserv (and a DoS/format/buffer issue in ypbind) can allow an attacker to gain root privileges when ypserv is built without vsyslog(). Affects Mandrake 7.1 and earlier; MDKSA-2000:064 notes vulnerable components and recomm...