Vulnerability in Nscd

CVE-2002-0511

The default configuration of Name Service Cache Daemon (nscd) in Caldera OpenLinux 3.1 and 3.1.1 uses cached PTR records instead of consulting the authoritative DNS server for the A record, which could make it easier for remote attackers to bypass applications that restrict access based on host names.

EPSS: 0.016 (73.0th percentile) — read the EPSS interpretation.

Affected products

  • Nscd — versions 2.2.4
  • N/a — versions n/a

References