CVE-2006-2655
Current Description
The build process for ypserv in FreeBSD 5.3 up to 6.1 accidentally disables access restrictions when using the /var/yp/securenets file, which allows remote attackers to bypass intended access restrictions.
Basic Data
| Published | June 02, 2006 |
|---|
| Last Modified | July 20, 2017 |
|---|
| Assigner | cve@mitre.org |
|---|
| Data Type | CVE |
|---|
| Data Format | MITRE |
|---|
| Data Version | 4.0 |
|---|
| Problem Type | NVD-CWE-Other |
|---|
| CVE Data Version | 4.0 |
|---|
Base Metric V2
| CVSS 2 - Version | 2.0 |
|---|
| CVSS 2 - Vector String | AV:N/AC:L/Au:N/C:P/I:P/A:N |
|---|
| CVSS 2 - Access Vector | NETWORK |
|---|
| CVSS 2 - Access Complexity | LOW |
|---|
| CVSS 2 - Authentication | NONE |
|---|
| CVSS 2 - Confidentiality Impact | PARTIAL |
|---|
| CVSS 2 - Availability Impact | NONE |
|---|
| CVSS 2 - Base Score | 6.4 |
|---|
| Severity | MEDIUM |
|---|
| Exploitability Score | 10.0 |
|---|
| Impact Score | 4.9 |
|---|
| Obtain All Privilege | false |
|---|
| Obtain User Privilege | false |
|---|
| Obtain Other Privilege | false |
|---|
Base Metric V3
No data provided.
Configurations
-
OR - Configuration 1
| Cpe Version | Part | Vendor | Product | Version | Update | Edition | Language | SW Edition | Target SW | Target HW | Other | Version Start Including | Version End Including | Version Start Excluding | Version End Excluding |
|---|
| 2.3 | OS | Freebsd | Freebsd | 5.3 | * | * | * | * | * | * | * | | | | |
| 2.3 | OS | Freebsd | Freebsd | 5.3 | release | * | * | * | * | * | * | | | | |
| 2.3 | OS | Freebsd | Freebsd | 5.3 | releng | * | * | * | * | * | * | | | | |
| 2.3 | OS | Freebsd | Freebsd | 5.3 | stable | * | * | * | * | * | * | | | | |
| 2.3 | OS | Freebsd | Freebsd | 5.4 | * | * | * | * | * | * | * | | | | |
| 2.3 | OS | Freebsd | Freebsd | 5.4 | pre-release | * | * | * | * | * | * | | | | |
| 2.3 | OS | Freebsd | Freebsd | 5.4 | release | * | * | * | * | * | * | | | | |
| 2.3 | OS | Freebsd | Freebsd | 5.4 | releng | * | * | * | * | * | * | | | | |
| 2.3 | OS | Freebsd | Freebsd | 5.4 | stable | * | * | * | * | * | * | | | | |
| 2.3 | OS | Freebsd | Freebsd | 6.0 | * | * | * | * | * | * | * | | | | |
| 2.3 | OS | Freebsd | Freebsd | 6.0 | release | * | * | * | * | * | * | | | | |
| 2.3 | OS | Freebsd | Freebsd | 6.0 | stable | * | * | * | * | * | * | | | | |
| 2.3 | OS | Freebsd | Freebsd | 6.1 | * | * | * | * | * | * | * | | | | |
| 2.3 | OS | Freebsd | Freebsd | 6.1 | release | * | * | * | * | * | * | | | | |
| 2.3 | OS | Freebsd | Freebsd | 6.1 | stable | * | * | * | * | * | * | | | | |
Vulnerable Software List
References
| Name | Source | URL | Tags |
|---|
| 20389 | http://secunia.com/advisories/20389 | SECUNIA | Patch Vendor Advisory |
| FreeBSD-SA-06:15 | http://security.freebsd.org/advisories/FreeBSD-SA-06:15.ypserv.asc | FREEBSD | Patch Vendor Advisory |
| 1016193 | http://securitytracker.com/id?1016193 | SECTRACK | |
| 25852 | http://www.osvdb.org/25852 | OSVDB | |
| 18204 | http://www.securityfocus.com/bid/18204 | BID | Patch |
| freebsd-ypserv-security-bypass(26792) | https://exchange.xforce.ibmcloud.com/vulnerabilities/26792 | XF | |
Follow @discotekdotca