National Vulnerability Database (CVE-2001-0779)

National Cyber-Alert System Vulnerability Summary: CVE-2001-0779
Orirignal release date: 2001-10-18 Source: US-CERT/NIST ### Overview Buffer overflow in rpc.yppasswdd (yppasswd server) in Solaris 2.6, 7 and 8 allows remote attackers to gain root access via a long username. ### Impact CVSS Severity: 10 (High) Range: remote Authentication: input buffer="1" Impact Type: sec_prot admin="1" ### Reference to Advisories, Solutions, and Tools External Source: Security Focus Name: http://www.securityfocus.com/archive/1/187086 adv=1 patch=1 Hyperlink: http://www.securityfocus.com/archive/1/187086 adv=1 patch=1 External Source: Security Focus Name: http://www.securityfocus.com/archive/1/200110041632.JAA28125@dim.ucsd.edu adv=1 patch=1 Hyperlink: http://www.securityfocus.com/archive/1/200110041632.JAA28125@dim.ucsd.edu adv=1 patch=1 External Source: ISS X-Force Name: solaris-yppasswd-bo(6629) Hyperlink: http://xforce.iss.net/static/6629.php External Source: Security Focus Name: bid2763 Hyperlink: http://www.securityfocus.com/bid/2763 ### Vulnerable Software and Vendor Solaris (Sun) Technical Details CVE Standard Vulnerability Entry: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0779