Test ID:	1.3.6.1.4.1.25623.1.0.80036
Category:	General
Title:	rpc.ypupdated RCE Vulnerability
Summary:	ypupdated with the '-i' option enabled is running on this port.
Description:	Summary: ypupdated with the '-i' option enabled is running on this port. Vulnerability Insight: ypupdated is part of NIS and allows a client to update NIS maps. This old command execution vulnerability was discovered in 1995 and fixed then. However, it is still possible to run ypupdated in insecure mode by adding the '-i' option. Anybody can easily run commands as root on this machine by specifying an invalid map name that starts with a pipe character. Exploits have been publicly available since the first advisory. Solution: Remove the '-i' option. If this option was not set, the rpc.ypupdated daemon is still vulnerable to the old flaw. Contact your vendor for a patch. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-1999-0208 Cert/CC Advisory: CA-95.17.rpc.ypupdated.vul https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0208 XForce ISS Database: rpc-update
Copyright	Copyright (C) 2008 Tenable Network Security, Inc. and Michel Arboi

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.