← Database

CVE-2002-1199

MEDIUM CVSS: 5.0 Published: 2002-10-28 Modified: 2026-06-16

Description

The getdbm procedure in ypxfrd allows local users to read arbitrary files, and remote attackers to read databases outside /var/yp, via a directory traversal and symlink attack on the domain and map arguments.

Affected Platforms

Caldera OpenlinuxSun SolarisSco OpenserverSun Sunos

Weakness Type

NVD-CWE-Other

References