PT-2011-1907

Name of the Vulnerable Software and Affected Versions YPNinc JokeScript affected versions not specified Description A SQL injection issue exists, allowing remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the ypncat id parameter in the index.php file...

CVE-2004-1942: Undefined Security Weakness

The Solaris 9 patches 113579-02 through 113579-05, and 114342-02 through 114342-05, prevent ypserv and ypxfrd from properly restricting access to secure NIS maps, which allows local users to use ypcat or ypmatch to extract the contents of a secure map such as passwd.adjunct.byname...

Solaris 9 patch 113579-03 introduces a NIS security bug

Posted to newsgroup comp.unix.solaris, and mailed to [email protected] Patch 113579-03, which has been in the recommended patch set for Solaris 9 since mid-February, introduces a security bug. If you are not running a NIS server using Solaris 9 you are not affected. If you do, but don't...