thedark Second Lieutenant
Joined: 30 Jul 2005
Posts: 1074
|
Posted: Thu Aug 04, 2005 12:05 am Post subject: Ypserv |
|
|
vulnerability was found in versions of ypserv prior to version 2.7.
If a malicious client were to query ypserv via TCP and subsequently
ignore the server's response, ypserv will block attempting to send
the reply. The result is that ypserv will fail to respond to other
client requests. ypserv 2.7 and above have been altered to fork a
child for each client request, which prevents any one request from
causing the server to block.
http://cve.mitre.org/cgi-bin/cvename.cgi?n...e=CAN-2003-0251 |
|