Software Engineering Institute

A buffer overflow vulnerability has been discovered in ypbind, a daemon that runs on all client and server machines running Solaris and SunOS and set up to use a Network Information Server (NIS).

This vulnerability may be exploited by a local or a remote attacker to gain root access, and thus complete control of the victim host.

Apply the appropriates patches, available at:

http://sunsolve.sun.com/securitypatch

Refer to the following table to see which patch you should apply.

        OS Version          Patch ID        
        __________          _________
        SunOS 5.8           110322-01    
        SunOS 5.8_x86       110323-01    
        SunOS 5.7           108750-02    
        SunOS 5.7_x86       108751-02    
        SunOS 5.6           105403-04  
        SunOS 5.6_x86       105404-04    
        SunOS 5.5.1         105165-04  
        SunOS 5.5.1_x86     105166-04    
        SunOS 5.5           105169-04  
        SunOS 5.5_x86       105170-04    
        SunOS 5.4           101973-41  
        SunOS 5.4_x86       101974-41

None.