EUVD-2004-1934

Malware in sbrugna...

EUVD-1999-1406

Malware in sbrugna...

FreeBSD Security Advisory FreeBSD-SA-06:15.ypserv

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:15.ypserv Security Advisory The FreeBSD Project Topic: Inoperative access controls in ypserv8 Category: core Module: ypserv Announced: 2006-05-31 Credits: Hoka...

ypserv -- Inoperative access controls in ypserv

Problem Description There are two documented methods of restricting access to NIS maps through ypserv8: through the use of the /var/yp/securenets file, and through the /etc/hosts.allow file. While both mechanisms are implemented in the server, a change in the build process caused the "securenets"...

CVE-2004-1942

The Solaris 9 patches 113579-02 through 113579-05, and 114342-02 through 114342-05, prevent ypserv and ypxfrd from properly restricting access to secure NIS maps, which allows local users to use ypcat or ypmatch to extract the contents of a secure map such as passwd.adjunct.byname...

CVE-2004-1942

The Solaris 9 patches 113579-02 through 113579-05, and 114342-02 through 114342-05, prevent ypserv and ypxfrd from properly restricting access to secure NIS maps, which allows local users to use ypcat or ypmatch to extract the contents of a secure map such as passwd.adjunct.byname...

CVE-1999-1425

Solaris Solstice AdminSuite AdminSuite 2.1 incorrectly sets write permissions on source files for NIS maps, which could allow local users to gain privileges by modifying /etc/passwd...

CVE-1999-1425

CVE-1999-1425 affects Solaris Solstice AdminSuite (AdminSuite) 2.1. The documented issue is that NIS map source files have incorrect write permissions, enabling local users to modify /etc/passwd and potentially gain privileges. The connected documents do not expand on root cause beyond the stated...

CVE-1999-1425

Solaris Solstice AdminSuite AdminSuite 2.1 incorrectly sets write permissions on source files for NIS maps, which could allow local users to gain privileges by modifying /etc/passwd...