Búsqueda de    
Vulnerabilidad   
    Buscar 324607 Descripciones CVE y
145615 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.56851
Categoría:FreeBSD Local Security Checks
Título:FreeBSD Security Advisory (FreeBSD-SA-06:15.ypserv.asc)
Resumen:The remote host is missing an update to the system; as announced in the referenced advisory FreeBSD-SA-06:15.ypserv.asc
Descripción:Summary:
The remote host is missing an update to the system
as announced in the referenced advisory FreeBSD-SA-06:15.ypserv.asc

Vulnerability Insight:
The ypserv(8) utility is a server which distributes NIS databases to client
systems within an NIS domain.

There are two documented methods of restricting access to NIS maps through
ypserv(8): through the use of the /var/yp/securenets file, and through the
/etc/hosts.allow file. While both mechanisms are implemented in the server,
a change in the build process caused the securenets access restrictions
to be inadvertently disabled.

Solution:
Upgrade your system to the appropriate stable release
or security branch dated after the correction date.

CVSS Score:
6.4

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:N

Referencia Cruzada: Common Vulnerability Exposure (CVE) ID: CVE-2006-2655
BugTraq ID: 18204
http://www.securityfocus.com/bid/18204
FreeBSD Security Advisory: FreeBSD-SA-06:15
http://security.freebsd.org/advisories/FreeBSD-SA-06:15.ypserv.asc
http://www.osvdb.org/25852
http://securitytracker.com/id?1016193
http://secunia.com/advisories/20389
XForce ISS Database: freebsd-ypserv-security-bypass(26792)
https://exchange.xforce.ibmcloud.com/vulnerabilities/26792
CopyrightCopyright (C) 2008 E-Soft Inc.

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2025 E-Soft Inc. Todos los derechos reservados.