PT-2002-1562 · Gnu+1 · Nscd+1

Published 2002-08-12 · Updated 2008-09-05 · CVE-2002-0511

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Caldera OpenLinux versions 3.1 through 3.1.1

Description The default configuration of the Name Service Cache Daemon (nscd) uses cached PTR records instead of consulting the authoritative DNS server for the A record. This could make it easier for remote attackers to bypass applications that restrict access based on host names.

Recommendations For Caldera OpenLinux versions 3.1 through 3.1.1, consider reconfiguring the nscd to consult the authoritative DNS server for the A record instead of relying on cached PTR records.

Fix

Related Identifiers

CVE-2002-0511

Affected Products

Caldera Openlinux

Nscd

References · 4

• http://calderasystems.com/support/security/advisories/CSSA-2002-013.0.txt · Vendor Advisory
• http://securityfocus.com/bid/4399 · Vendor Advisory
• http://iss.net/security_center/static/8745.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0511 · Security Note