Ypbind -ypset/-ypsetme缓冲区溢出漏洞

漏洞信息详情

Ypbind -ypset/-ypsetme缓冲区溢出漏洞

• CNNVD编号：CNNVD-199702-007
• 危害等级： 高危
  
  
• CVE编号：
  CVE-1999-0298
  
• 漏洞类型：
  
  
  其他
  
• 发布时间：
  
  1997-02-05
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2005-10-20
  
• 厂        商：
  
  slackware
• 漏洞来源：
  This vulnerability…

Linux Slackware和SunOS激活-ypset和-ypsetme选项的ypbind存在漏洞。本地用户和远程攻击者可以通过..(点 点)攻击覆盖文件。

From the Network Associates advisory:
We suggest that you not invoke ypbind with either the -ypset or -ypsetme options. It would be better practice to define which NIS clients may bind to which NIS servers in local configuration files.

来源: NAI
名称: 19970205 Vulnerabilities in Ypbind when run with -ypset/-ypsetme
链接:http://www.nai.com/nai_labs/asp_set/advisory/06_ypbindsetme_adv.asp