CVE-2002-1199 The getdbm procedure in ypxfrd allows local users to read arbitrary files, and remote attackers to read databases outside /var/yp, via a directory traversal and symlink attack on the domain and map ar...
MediumCVSS 5.0
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The getdbm procedure in ypxfrd allows local users to read arbitrary files, and remote attackers to read databases outside /var/yp, via a directory traversal and symlink attack on the domain and map arguments.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| caldera openlinux | = 2.2 | No fix listed |
| caldera openlinux | = 2.3 | No fix listed |
| caldera openlinux | = 2.4 | No fix listed |
| sco openserver | = 5.0.5 | No fix listed |
| sco openserver | = 5.0.6 | No fix listed |
| sco openserver | = 5.0.6a | No fix listed |
| sun solaris | = 9.0 | No fix listed |
| sunos | = 5.7 | No fix listed |
| sunos | = 5.8 | No fix listed |
References
- 20021010 Multiple vendor ypxfrd map handling vulnerability mailing-list
- 47903 vendor-advisory
- ypxfrd-file-disclosure(10329) vdb-entry
- VU#538033 third-party-advisory us-government-resource
- 5937 vdb-entry
- oval:org.mitre.oval:def:2423 signature vdb-entry