Scientific Linux Security Update : ypbind on SL3.x i386/x86_64

high Nessus Plugin ID 60411

Synopsis

The remote Scientific Linux host is missing a security update.

Description

This updated package fixes the following bugs :

- after a NIS server change, for example, after a server failure, ypbind corrupted files in the '/var/yp/binding/' directory. As well, these files were not updated, possibly causing old information to be retained. In these situations, glibc attempted to read the incorrect information, resulting in errors such as 'RPC: Unable to receive; errno = Connection refused'.

- by default, NIS clients pinged NIS servers every 20 seconds. In large deployments, this added extra load, and could possibly cause a denial of service. In this updated package, a new 'ypbind' option, '-ping-interval', has been added, which allows administrators to configure the ping interval value.

Solution

Update the affected ypbind package.

See Also

http://www.nessus.org/u?bfde1fef

Plugin Details

Severity: High

ID: 60411

File Name: sl_20080527_ypbind_on_SL3_x.nasl

Version: 1.5

Type: local

Agent: unix

Published: 8/1/2012

Updated: 1/14/2021

Supported Sensors: Nessus Agent, Nessus

Vulnerability Information

CPE: x-cpe:/o:fermilab:scientific_linux

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu

Patch Publication Date: 5/27/2008