CVE-2000-1040 Format string vulnerability in logging function of ypbind 3.3, while running in debug mode, leaks file descriptors and allows an attacker to cause a denial of service.
HighCVSS 10.0
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in logging function of ypbind 3.3, while running in debug mode, leaks file descriptors and allows an attacker to cause a denial of service.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| suse linux | = 6.2 | No fix listed |
| suse linux | = 6.3 | No fix listed |
| suse linux | = 6.4 | No fix listed |
| suse linux | = 7.0 | No fix listed |
References
- 20001025 Immunix OS Security Update for ypbind package mailing-list
- 20001030 Trustix Security Advisory - ping gnupg ypbind mailing-list
- SuSE-SA:2000:042 vendor-advisory
- CSSA-2000-039.0 vendor-advisory
- 20001014 nis: local exploit vendor-advisory
- MDKSA-2000:064 vendor-advisory
- RHSA-2000:086 vendor-advisory
- 1820 patch vdb-entry vendor-advisory
- ypbind-printf-format-string(5394) vdb-entry