ypserv: NIS information leak
| Package(s): | nis, ypserv | CVE #(s): | CAN-2002-1232 | ||||||||||||||||||||||||
| Created: | October 21, 2002 | Updated: | December 5, 2002 | ||||||||||||||||||||||||
| Description: | Thorsten Kukuck discovered a problem in the ypserv program which is part of the Network Information Services (NIS). A memory leak in all versions of ypserv prior to 2.5 is remotely exploitable. When a malicious user could request a non-existing map the server will leak parts of an old domainname and mapname. | ||||||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||||||