PT-2002-1562 · Gnu+1 · Nscd+1

Publicado 2002-08-12 · Atualizado 2008-09-05 · CVE-2002-0511

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Caldera OpenLinux versions 3.1 through 3.1.1

Description The default configuration of the Name Service Cache Daemon (nscd) uses cached PTR records instead of consulting the authoritative DNS server for the A record. This could make it easier for remote attackers to bypass applications that restrict access based on host names.

Recommendations For Caldera OpenLinux versions 3.1 through 3.1.1, consider reconfiguring the nscd to consult the authoritative DNS server for the A record instead of relying on cached PTR records.

Correção

Identificadores relacionados

CVE-2002-0511

Produtos afetados

Caldera Openlinux

Nscd

Referências · 4

• http://calderasystems.com/support/security/advisories/CSSA-2002-013.0.txt · Aviso do Fabricante
• http://securityfocus.com/bid/4399 · Aviso do Fabricante
• http://iss.net/security_center/static/8745.php · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-0511 · Nota de Segurança