Description
Format string vulnerability in logging function of ypbind 3.3, while running in debug mode, leaks file descriptors and allows an attacker to cause a denial of service.
References
- 20001030 Trustix Security Advisory - ping gnupg ypbind mailing-list
- 20001025 Immunix OS Security Update for ypbind package mailing-list
- ypbind-printf-format-string(5394) vdb-entry
- RHSA-2000:086 vendor-advisory
- 20001014 nis: local exploit vendor-advisory
- 1820 vdb-entry
- SuSE-SA:2000:042 vendor-advisory
- CSSA-2000-039.0 vendor-advisory
- MDKSA-2000:064 vendor-advisory