FreeBSD Security Advisory (FreeBSD-SA-06:15.ypserv.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:15.ypserv.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Debian: Security Advisory (DSA-180)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 180-1 (nis)

The remote host is missing an update to nis announced via advisory DSA 180-1. OpenVAS Vulnerability Test $Id: deb1801.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 180-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Design/Logic Flaw

The build process for ypserv in FreeBSD 5.3 up to 6.1 accidentally disables access restrictions when using the /var/yp/securenets file, which allows remote attackers to bypass intended access restrictions...

CVE-2006-2655

The build process for ypserv in FreeBSD 5.3 up to 6.1 accidentally disables access restrictions when using the /var/yp/securenets file, which allows remote attackers to bypass intended access restrictions...

CVE-2006-2655

The build process for ypserv in FreeBSD 5.3 up to 6.1 accidentally disables access restrictions when using the /var/yp/securenets file, which allows remote attackers to bypass intended access restrictions...

CVE-2006-2655

The CVE-2006-2655 entry concerns FreeBSD ypserv (NIS server) in 5.x/6.x releases. The issue, caused by a build-process change, inadvertently disables access restrictions from the /var/yp/securenets mechanism (and relies on hosts.allow as a workaround), potentially allowing remote attackers to byp...

FreeBSD Security Advisory FreeBSD-SA-06:15.ypserv

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:15.ypserv Security Advisory The FreeBSD Project Topic: Inoperative access controls in ypserv8 Category: core Module: ypserv Announced: 2006-05-31 Credits: Hoka...

FreeBSD ypserv NIS access protection bypass

/var/yp/securenets access control restrictions do not work...

ypserv -- Inoperative access controls in ypserv

Problem Description There are two documented methods of restricting access to NIS maps through ypserv8: through the use of the /var/yp/securenets file, and through the /etc/hosts.allow file. While both mechanisms are implemented in the server, a change in the build process caused the "securenets"...

FreeBSD-SA-06:15.ypserv

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:15.ypserv Security Advisory The FreeBSD Project Topic: Inoperative access controls in ypserv8 Category: core Module: ypserv Announced: 2006-05-31 Credits: Hoka...

ypserv security update

CentOS Errata and Security Advisory CESA-2006:0203-8 Merged security bulletin from advisories: https://lists.centos.org/pipermail/centos-announce/2006-March/074940.html Affected packages: ypserv...

CVE-2004-1942

The CVE-2004-1942 issue affects Solaris 9, addressed by patches 113579-02..05 and 114342-02..05. ypserv and ypxfrd fail to properly restrict access to secure NIS maps, enabling local users to use ypcat or ypmatch to read contents of maps such as passwd.adjunct.byname. Impact aligns with Partial c...

Debian DSA-180-1 : nis - information leak

Thorsten Kukuck discovered a problem in the ypserv program which is part of the Network Information Services NIS. A memory leak in all versions of ypserv prior to 2.5 is remotely exploitable. When a malicious user could request a non-existing map the server will leak parts of an old domainname an...

CVE-2002-1232

Memory leak in ypdbopen in ypdb.c for ypserv before 2.5 in the NIS package 3.9 and earlier allows remote attackers to cause a denial of service memory consumption via a large number of requests for a map that does not exist...

CVE-2002-1232

Memory leak in ypdbopen in ypdb.c for ypserv before 2.5 in the NIS package 3.9 and earlier allows remote attackers to cause a denial of service memory consumption via a large number of requests for a map that does not exist...

CVE-2002-1232

CVE-2002-1232 describes a memory leak in ypserv’s ypdb_open (yp_db.c) affecting the NIS package prior to version 2.5. Repeated remote requests for non-existent maps can exhaust memory, causing a denial-of-service condition. Multiple vendor advisories document this issue (e.g., Mandrake MDKSA-2002...

RPC NIS ypserv Service In Use

Binary data 1022.prm...

Mandrake Linux Security Advisory : ypserv (MDKSA-2002:078)

A memory leak that could be triggered remotely was discovered in ypserv 2.5 and earlier. This could lead to a Denial of Service as repeated requests for a non-existent map will result in ypserv consuming more and more memory, and also running more slowly. If the system runs out of available memor...

Mandrake Linux Security Advisory : ypserv (MDKSA-2003:072)

A vulnerability was found in versions of ypserv prior to version 2.7. If a malicious client were to query ypserv via TCP and subsequently ignore the server's response, ypserv will block attempting to send the reply. The result is that ypserv will fail to respond to other client requests. ypserv 2...