Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The getdbm procedure in ypxfrd allows local users to read arbitrary files, and remote attackers to read databases outside /var/yp, via a directory traversal and symlink attack on the domain and map arguments.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
多个厂商ypxfrd读取本地任意文件漏洞
Vulnerability Description
ypxfrd守护进程用于加速从NIS主服务器向从服务器的传输较大的NIS map文件的过程。 多个系统平台下的Ypxfrd守护进程存在问题，未授权的本地攻击者可以在运行了ypxfrd进程的系统上读取任意文件， 远程读取/var/yp目录外的任意map文件也是可能的.。 当getdbm过程被调用时， ypxfrd进程会创建一个指向/var/yp/domain/map文件的路径(这里面的domain和map都是在请求中提供的参数). 但它没有检查是否这些参数中包含'/'或'..'字符， 所以使得/var/yp
CVSS Information
N/A
Vulnerability Type
N/A