CVE-2002-1199: Caldera Openlinux

Medium severity, CVSS 5.0. EPSS: 2.2% chance of exploitation in the next 30 days.

The getdbm procedure in ypxfrd allows local users to read arbitrary files, and remote attackers to read databases outside /var/yp, via a directory traversal and symlink attack on the domain and map arguments.

Affected products

• Caldera Openlinux: version 2.2 only; version 2.3 only; version 2.4 only
• Sco Openserver: version 5.0.5 only; version 5.0.6 only; version 5.0.6a only
• Sun Solaris: version 9.0 only
• Sun Sunos: version 5.7 only; version 5.8 only

Published 2002-10-28. Last modified 2026-06-16.