Description
The Solaris 9 patches 113579-02 through 113579-05, and 114342-02 through 114342-05, prevent ypserv and ypxfrd from properly restricting access to secure NIS maps, which allows local users to use ypcat or ypmatch to extract the contents of a secure map such as passwd.adjunct.byname.
References
- 20040419 Solaris 9 patch 113579-03 introduces a NIS security bug mailing-list
- O-144 third-party-advisory government-resource
- 10261 vdb-entry
- 57554 vendor-advisory
- solaris-nis-unauth-privileges(15908) vdb-entry