Description
Format string vulnerability in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an attacker to gain root privileges when ypserv is built without a vsyslog() function.
References
- linux-ypserv-format-string(5731) vdb-entry
- MDKSA-2000:064 vendor-advisory