Description
The getdbm procedure in ypxfrd allows local users to read arbitrary files, and remote attackers to read databases outside /var/yp, via a directory traversal and symlink attack on the domain and map arguments.
References
- 47903 vendor-advisory
- 20021010 Multiple vendor ypxfrd map handling vulnerability mailing-list
- ypxfrd-file-disclosure(10329) vdb-entry
- VU#538033 third-party-advisory
- oval:org.mitre.oval:def:2423 vdb-entry signature
- 5937 vdb-entry