CVE-2006-2655

Published: Jun 2, 2006Modified: Apr 16, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

The build process for ypserv in FreeBSD 5.3 up to 6.1 accidentally disables access restrictions when using the /var/yp/securenets file, which allows remote attackers to bypass intended access restrictions.

Affected (15)

Products: Freebsd: Freebsd

Freebsd

1 product

Freebsd

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Freebsd Freebsd	Version 5.3
Freebsd Freebsd	Version 5.3 release
Freebsd Freebsd	Version 5.3 releng
Freebsd Freebsd	Version 5.3 stable
Freebsd Freebsd	Version 5.4
Freebsd Freebsd	Version 5.4 pre-release
Freebsd Freebsd	Version 5.4 release
Freebsd Freebsd	Version 5.4 releng
Freebsd Freebsd	Version 5.4 stable
Freebsd Freebsd	Version 6.0
Freebsd Freebsd	Version 6.0 release
Freebsd Freebsd	Version 6.0 stable
Freebsd Freebsd	Version 6.1
Freebsd Freebsd	Version 6.1 release
Freebsd Freebsd	Version 6.1 stable