CVE-2002-1199

The CVE-2002-1199 issue affects the ypxfrd daemon used for NIS map distribution. The getdbm procedure constructs a path to /var/yp/domain/map without proper validation, allowing directory traversal via the domain and map arguments and enabling a symlink-based override that can expose files outsid...

CVE-2002-1199: Undefined Security Weakness

The getdbm procedure in ypxfrd allows local users to read arbitrary files, and remote attackers to read databases outside /var/yp, via a directory traversal and symlink attack on the domain and map arguments...