BID:2763

Multiple Vendor rpc.yppasswdd Buffer Overrun Vulnerability

Info

Multiple Vendor rpc.yppasswdd Buffer Overrun Vulnerability

Bugtraq ID:	2763
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	May 10 2001 12:00AM
Updated:	May 10 2001 12:00AM
Credit:	This vulnerability was first made public when 'metaray' published exploit code.
Vulnerable:	Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Solaris 7.0_x86 Sun Solaris 7.0 Sun Solaris 2.6_x86 Sun Solaris 2.6 HP HP-UX 11.22 HP HP-UX 11.11 HP HP-UX 11.0 HP HP-UX 10.20 HP HP-UX 10.10 Caldera OpenServer 5.0.6 Caldera OpenServer 5.0.5

Not Vulnerable:

Exploit / POC

Multiple Vendor rpc.yppasswdd Buffer Overrun Vulnerability

This vulnerability was first published through the release of an exploit written by 'metaray.' It is available below:

/data/vulnerabilities/exploits/ypexp.tar.gz

Solution / Fix

Multiple Vendor rpc.yppasswdd Buffer Overrun Vulnerability

Solution:
It is recemmended that this service is disabled until patches are available. If this is not an option, network access control should be implemented blocking access to ports that rpc.yppasswdd might use.

Customers of HP-UX 10.10 are advised to contact [email protected] for further information.

HP-UX 10.20 users and admins are advised to download a replacement rpc.yppasswd binary from the following location:

ftp://yppass:[email protected]/
ftp://yppass:[email protected]/

HP-UX 11.00, 11.11, and 11.22 users and admins are advised to apply the follow or subsequent PHNE file:

11.00 - PHNE_28102
11.11 - PHNE_28103
11.22 - PHNE_28138

Further information is available in the referenced advisory.

HP has released a revision of the advisory HPSBUX0302-242 (rev.2). Please see the referenced advisory for more information.

Fixes are available:

Sun Solaris 2.6