YPServ Remote Network Information Leakage Vulnerability

Bugtraq ID:	6016
Class:	Design Error
CVE:	CVE-2002-1232
Remote:	Yes
Local:	No
Published:	Oct 21 2002 12:00AM
Updated:	Jul 11 2009 06:06PM
Credit:	Discovery credited to Thorsten Kukuk.
Vulnerable:	Thorsten Kukuk ypserv 2.4 Thorsten Kukuk ypserv 2.3 Thorsten Kukuk ypserv 2.2 Thorsten Kukuk ypserv 2.1 Thorsten Kukuk ypserv 2.0 Sun Solaris 2.5.1 _x86 Sun Solaris 2.5.1 Sun Solaris 9 Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Solaris 7.0_x86 Sun Solaris 7.0 Sun Solaris 2.6_x86 Sun Solaris 2.6 Redhat ypserv-2.2-9.i386.rpm + Redhat Linux 7.3 Redhat ypserv-1.3.9-3.i386.rpm + Redhat Linux 6.2 Redhat Linux 7.3 i386 Redhat Linux 7.3 Redhat Linux 7.2 ia64 Redhat Linux 7.2 Redhat Linux 7.1 ia64 Redhat Linux 7.1 i386 Redhat Linux 7.1 Redhat Linux 7.0 i386 Redhat Linux 7.0 alpha Redhat Linux 7.0 Redhat Linux 6.2 sparc Redhat Linux 6.2 i386 Redhat Linux 6.2 alpha Redhat Linux 6.2 Mandriva Linux Mandrake 9.0 Mandriva Linux Mandrake 8.2 ppc Mandriva Linux Mandrake 8.2 Mandriva Linux Mandrake 8.1 ia64 Mandriva Linux Mandrake 8.1 Mandriva Linux Mandrake 8.0 ppc Mandriva Linux Mandrake 8.0 Mandriva Linux Mandrake 7.2 HP Secure OS software for Linux 1.0 Debian Linux 3.0 sparc Debian Linux 3.0 s/390 Debian Linux 3.0 ppc Debian Linux 3.0 mipsel Debian Linux 3.0 mips Debian Linux 3.0 m68k Debian Linux 3.0 ia-64 Debian Linux 3.0 hppa Debian Linux 3.0 arm Debian Linux 3.0 alpha Debian Linux 3.0 Debian Linux 2.2 sparc Debian Linux 2.2 powerpc Debian Linux 2.2 IA-32 Debian Linux 2.2 arm Debian Linux 2.2 alpha Debian Linux 2.2 68k Debian Linux 2.2 Caldera OpenLinux Workstation 3.1.1 Caldera OpenLinux Workstation 3.1 Caldera OpenLinux Server 3.1.1 Caldera OpenLinux Server 3.1
Not Vulnerable:	Thorsten Kukuk ypserv 2.5

YPServ Remote Network Information Leakage Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.