First published: Mon Jun 29 1998(Updated: )
NIS finger allows an attacker to conduct a denial of service via a large number of finger requests, resulting in a large number of NIS queries.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Sun SunOS | ||
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-1999-0797 is classified as a medium severity vulnerability due to its potential to cause denial of service.
To fix CVE-1999-0797, you should implement rate limiting on finger requests and restrict access to the NIS service.
CVE-1999-0797 affects SunOS systems that support the Network Information Service (NIS) and are capable of responding to finger requests.
CVE-1999-0797 facilitates denial of service attacks through an overwhelming number of finger requests leading to excessive NIS queries.
Yes, CVE-1999-0797 can be exploited remotely if the NIS service is accessible over the network.