CVE-2002-1232: Memory leak in ypdb_open in yp_db.c for ypserv before 2.5 in the NIS package 3.9 and earlier allows remote...

Security readout for executives and security teams

CVE-2002-1232 is a remote denial-of-service issue in legacy ypserv/NIS. Repeated requests for a missing NIS map can leak memory and eventually disrupt the service or host. The business risk is mainly availability for older systems still depending on NIS for identity or directory data. Exposure is most likely on legacy Unix/Linux environments still running ypserv/NIS, especially where NIS is reachable beyond tightly trusted administration networks. Internet exposure would raise urgency, but the bundle does not identify current exposed populations. Prioritize if NIS supports authentication or directory services for production systems, or if ypserv is reachable from broad networks. Otherwise, handle through legacy infrastructure remediation and network exposure reduction. Mitigation focus: Inventory systems running ypserv or NIS services.; Upgrade using vendor advisories that address ypserv before 2.5.; Restrict NIS access to trusted networks only..

Prepared

Jun 30, 2026, 05:11 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.