YPUDATE Vulnerability

## YPUPDATE Vulnerability

### Risk Factor: 10

### Machines Affected:

SunOS 4.1.x and older, and most UNIXes

### Description:

Ypupdate is used to update ypmaps, etc. on host machines. When ypupdate requests to update yp maps on a host machine it forks and executes a copy of the bourne shell. Through the bourne shell meta characters may be passed into the arguments causing a security breach.

### Consequences:

Remote users may be able to execute arbitrary root commands on a target host running ypupdated and keyserv.

### Fix:

Use SecureRPC, and update your version of NIS, or simply do not run it.

Links for advisories/more info
Nothing.