Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The build process for ypserv in FreeBSD 5.3 up to 6.1 accidentally disables access restrictions when using the /var/yp/securenets file, which allows remote attackers to bypass intended access restrictions.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
FreeBSD ypserv 访问控制绕过漏洞
Vulnerability Description
FreeBSD就是一种运行在Intel平台上、可以自由使用的开放源码Unix类系统。 FreeBSD的ypserv的访问控制实现上存在漏洞，远程攻击者可能利用此漏洞绕过访问控制。 有两种记录的方法限制通过ypserv(8)对NIS映射的访问：通过使用/var/yp/securenets文件和/etc/hosts.allow文件。尽管服务程序中实现了这两种机制，但编译过程中的更改导致无意中禁用了securenets访问限制。 ypserv(8)不会加载或处理/var/yp/securenets文件中所指定的
CVSS Information
N/A
Vulnerability Type
N/A