CVE

Id
5583  
CVE No.
CVE-2002-1199  
Status
Entry  
Description
The getdbm procedure in ypxfrd allows local users to read arbitrary files, and remote attackers to read databases outside /var/yp, via a directory traversal and symlink attack on the domain and map arguments.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
30525 5583 CVE-2002-1199 BUGTRAQ:20021010 Multiple vendor ypxfrd map handling vulnerability  View
30526 5583 CVE-2002-1199 URL:http://marc.info/?l=bugtraq&m=103426842025029&w=2  View
30527 5583 CVE-2002-1199 CALDERA:CSSA-2002-SCO.40  View
30528 5583 CVE-2002-1199 URL:ftp://ftp.caldera.com/pub/updates/OpenServer/CSSA-2002-SCO.40  View
30529 5583 CVE-2002-1199 COMPAQ:SSRT2339  View
30530 5583 CVE-2002-1199 SUNALERT:47903  View
30531 5583 CVE-2002-1199 URL:http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/47903  View
30532 5583 CVE-2002-1199 CERT-VN:VU#538033  View
30533 5583 CVE-2002-1199 URL:http://www.kb.cert.org/vuls/id/538033  View
30534 5583 CVE-2002-1199 BID:5937  View
30535 5583 CVE-2002-1199 URL:http://www.securityfocus.com/bid/5937  View
30536 5583 CVE-2002-1199 OVAL:oval:org.mitre.oval:def:2423  View
30537 5583 CVE-2002-1199 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:2423  View
30538 5583 CVE-2002-1199 XF:ypxfrd-file-disclosure(10329)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63919 JVNDB-2002-000246 ypxfrd における情報漏洩の脆弱性 ypxfrd には、引数として渡された文字列の検査を適切に行わないという問題が存在し、"." や "/" を含めた文字列を引数として渡すことにより、本来であればアクセスできない /var/yp ディレクトリ外のファイルを参照されてしまう脆弱性が存在します。 CVE-2002-1199 5583 5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000246.html  View