• info
• discussion
• exploit
• solution
• references

Multiple Vendor NIS Server YPSERV Denial Of Service Vulnerability

Solution:
Please see the referenced advisories for information on obtaining fixes.


ypserv ypserv 1.3.11

• TurboLinux ypserv-2.9-3.i386.rpm
  ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Server/6.1/ja/ updates/RPMS/ypserv-2.9-3.i386.rpm


• TurboLinux ypserv-2.9-3.i386.rpm
  ftp://ftp.turbolinux.com/pub/TurboLinux/TurboLinux/ia32/Server/6.5/upd ates/RPMS/ypserv-2.9-3.i386.rpm


• TurboLinux ypserv-2.9-3.i586.rpm
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/upd ates/RPMS/ypserv-2.9-3.i586.rpm


• TurboLinux ypserv-2.9-3.i586.rpm
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/upd ates/RPMS/ypserv-2.9-3.i586.rpm


• TurboLinux ypserv-2.9-3.i586.rpm
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/ 7/updates/RPMS/ypserv-2.9-3.i586.rpm


• TurboLinux ypserv-2.9-3.i586.rpm
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/ 8/updates/RPMS/ypserv-2.9-3.i586.rpm


• ypserv ypserv-2.8.tar.gz
  ftp://ftp.kernel.org/pub/linux/utils/net/NIS/ypserv-2.8.tar.gz

ypserv ypserv 1.3.12

• ypserv ypserv-2.8.tar.gz
  ftp://ftp.kernel.org/pub/linux/utils/net/NIS/ypserv-2.8.tar.gz

ypserv ypserv 2.2

• Mandrake ypserv-2.8-1.1mdk.i586.rpm
  Mandrake Linux 8.2, 9.0 & Corporate Server 2.1
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake ypserv-2.8-1.1mdk.x86_64.rpm
  Mandrake Corporate Server 2.1/X86_64
  http://www.mandrakesecure.net/en/ftp.php


• ypserv ypserv-2.8.tar.gz
  ftp://ftp.kernel.org/pub/linux/utils/net/NIS/ypserv-2.8.tar.gz

Terra Soft Solutions Yellow Dog Linux 2.3

• Terra Soft Solutions ypserv-2.8-0.72E.ppc.rpm
  ftp://ftp.yellowdoglinux.com/pub/yellowdog/updates/yellowdog-2.3/ppc/y pserv-2.8-0.72E.ppc.rpm

ypserv ypserv 2.5

• ypserv ypserv-2.8.tar.gz
  ftp://ftp.kernel.org/pub/linux/utils/net/NIS/ypserv-2.8.tar.gz

ypserv ypserv 2.6

• ypserv ypserv-2.8.tar.gz
  ftp://ftp.kernel.org/pub/linux/utils/net/NIS/ypserv-2.8.tar.gz

ypserv ypserv 2.7

• Conectiva ypserv-2.9-0.i586.rpm
  ftp://ul.conectiva.com.br/updates/1.0/RPMS.core/ypserv-2.9-0.i586.rpm


• ypserv ypserv-2.8.tar.gz
  ftp://ftp.kernel.org/pub/linux/utils/net/NIS/ypserv-2.8.tar.gz

Terra Soft Solutions Yellow Dog Linux 3.0

• Terra Soft Solutions ypserv-2.8-0.9E.ppc.rpm
  ftp://ftp.yellowdoglinux.com/pub/yellowdog/updates/yellowdog-3.0/ppc/y pserv-2.8-0.9E.ppc.rpm

Sun Linux 5.0.6

• Sun ypserv-2.8-0.72E.i386.rpm
  ftp://ftp.cobalt.sun.com/pub/products/sunlinux/5.0/en/updates/i386/RPM S/ypserv-2.8-0.72E.i386.rpm