CVE-2003-0251 Denial of service in n/a
Remote attackers can cause a denial of service in ypserv NIS server by sending TCP requests that do not respond, blocking the server.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2003-0251?
CVE-2003-0251 is a medium-severity denial of service vulnerability in n/a, published on 28 Jun 2003. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
ypserv NIS server before 2.7 allows remote attackers to cause a denial of service via a TCP client request that does not respond to the server, which causes ypserv to block.
Which versions are affected by CVE-2003-0251?
It affects 1 product.
Products include Nis Ypserv Nis Server.
How do I fix CVE-2003-0251?
Upgrade to a fixed version.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2003-0251 being exploited?
There is no known exploitation of CVE-2003-0251 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2003-0251, GHSA-7xw4-2hf3-hvxx.