CVE Vulnerabilities

CVE-2006-2655

Published: Jun 02, 2006 | Modified: Jul 20, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
6.4 MEDIUM
AV:N/AC:L/Au:N/C:P/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

The build process for ypserv in FreeBSD 5.3 up to 6.1 accidentally disables access restrictions when using the /var/yp/securenets file, which allows remote attackers to bypass intended access restrictions.

Affected Software

Name Vendor Start Version End Version
Freebsd Freebsd 5.3 (including) 5.3 (including)
Freebsd Freebsd 5.3-release (including) 5.3-release (including)
Freebsd Freebsd 5.3-releng (including) 5.3-releng (including)
Freebsd Freebsd 5.3-stable (including) 5.3-stable (including)
Freebsd Freebsd 5.4 (including) 5.4 (including)
Freebsd Freebsd 5.4-pre-release (including) 5.4-pre-release (including)
Freebsd Freebsd 5.4-release (including) 5.4-release (including)
Freebsd Freebsd 5.4-releng (including) 5.4-releng (including)
Freebsd Freebsd 5.4-stable (including) 5.4-stable (including)
Freebsd Freebsd 6.0 (including) 6.0 (including)
Freebsd Freebsd 6.0-release (including) 6.0-release (including)
Freebsd Freebsd 6.0-stable (including) 6.0-stable (including)
Freebsd Freebsd 6.1 (including) 6.1 (including)
Freebsd Freebsd 6.1-release (including) 6.1-release (including)
Freebsd Freebsd 6.1-stable (including) 6.1-stable (including)

References