ypbind with -ypset and -ypsetme options activated in Linux Slackware and SunOS allows local and remote attackers to overwrite files via a .. (dot dot) attack.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Slackware_linux | Slackware | 2.1 (including) | 2.1 (including) |
| Slackware_linux | Slackware | 2.2 (including) | 2.2 (including) |
| Slackware_linux | Slackware | 2.3 (including) | 2.3 (including) |
| Sunos | Sun | 4.1.3 (including) | 4.1.3 (including) |
| Sunos | Sun | 4.1.4 (including) | 4.1.4 (including) |