ypserv: denial of service [LWN.net]

Package(s):

ypserv

CVE #(s):

CAN-2003-0251

Created:

June 25, 2003

Updated:

July 11, 2003

Description:

From the Red Hat advisory: "A vulnerability has been discovered in the ypserv NIS server prior to version 2.7. If a malicious client queries ypserv via TCP and subsequently ignores the server's response, ypserv will block attempting to send the reply. This results in ypserv failing to respond to other client requests." The fix is up upgrade to version 2.8.0.

Alerts:

Gentoo	200307-04	2003-07-11
Yellow Dog	YDU-20030627-1	2003-06-27
Mandrake	MDKSA-2003:072	2003-06-27
Red Hat	RHSA-2003:173-01	2003-06-25

(Log in to post comments)