CVE-2006-2655

The build process for ypserv in FreeBSD 5.3 up to 6.1 accidentally disables access restrictions when using the /var/yp/securenets file, which allows remote attackers to bypass intended access restrictions.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:freebsd:freebsd:5.3:*:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.3:release:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.3:releng:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.3:stable:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.4:*:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.4:pre-release:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.4:release:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.4:releng:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:5.4:stable:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:6.0:*:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:6.0:release:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:6.0:stable:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:6.1:*:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:6.1:release:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:6.1:stable:*:*:*:*:*:*

History

21 Nov 2024, 00:11

Type Values Removed Values Added
References () http://secunia.com/advisories/20389 - Patch, Vendor Advisory () http://secunia.com/advisories/20389 - Patch, Vendor Advisory
References () http://security.freebsd.org/advisories/FreeBSD-SA-06:15.ypserv.asc - Patch, Vendor Advisory () http://security.freebsd.org/advisories/FreeBSD-SA-06:15.ypserv.asc - Patch, Vendor Advisory
References () http://securitytracker.com/id?1016193 - () http://securitytracker.com/id?1016193 -
References () http://www.osvdb.org/25852 - () http://www.osvdb.org/25852 -
References () http://www.securityfocus.com/bid/18204 - Patch () http://www.securityfocus.com/bid/18204 - Patch
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/26792 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/26792 -

Information

Published : 2006-06-02 01:02

Updated : 2024-11-21 00:11


NVD link : CVE-2006-2655

Mitre link : CVE-2006-2655

CVE.ORG link : CVE-2006-2655


JSON object : View

Products Affected

freebsd

  • freebsd