Description

SGI has reported multiple vulnerabilities in the Name Service Daemon (nsd) in IRIX.

1) It is possible to cause a DoS (Denial of Service) on the nsd service by performing a UDP portscanning on a NIS master.

2) Group entries in "/etc/group" are not ignored even though they have a minus ("-") in front of the name.

3) A specially crafted dynamic table may consume all memory resources.

4) DNS callbacks are not sanitised properly.

The vulnerabilities affect all versions of IRIX 6.5 prior to version 6.5.21.

Solution
Update to version 6.5.21 or apply patch.
Further details available in Customer Area

Original Advisory
ftp://patches.sgi.com/support/free/security/advisories/20030701-01-P

Deep Links
Links available in Customer Area