CVE-2000-1040

SUSE Linux - Denial of Service via ypbind Format String Vulnerability

Title source: llm

Description

Format string vulnerability in logging function of ypbind 3.3, while running in debug mode, leaks file descriptors and allows an attacker to cause a denial of service.

References (9)

Core 9

Core References

Third Party Advisory mailing-list x_refsource_bugtraq

http://archives.neohapsis.com/archives/bugtraq/2000-10/0429.html

Third Party Advisory mailing-list x_refsource_bugtraq

http://archives.neohapsis.com/archives/bugtraq/2000-10/0356.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/5394

Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2000-086.html

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2000/20001014

Patch, Vendor Advisory vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/1820

Third Party Advisory vendor-advisory x_refsource_suse

http://archives.neohapsis.com/archives/linux/suse/2000-q4/0262.html

Vendor Advisory vendor-advisory x_refsource_caldera

http://www.calderasystems.com/support/security/advisories/CSSA-2000-039.0.txt

Various Sources vendor-advisory x_refsource_mandrake

http://www.linux-mandrake.com/en/security/MDKSA-2000-064.php3?dis=7.1

Scores

EPSS 0.0184

EPSS Percentile 83.2%

Details

Status published

Products (4)

suse/suse_linux 6.2

suse/suse_linux 6.3

suse/suse_linux 6.4

suse/suse_linux 7.0

Published Dec 11, 2000

Tracked Since Feb 18, 2026