CVE-2006-2655

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-06-02 · updated 2026-06-16

Description

The build process for ypserv in FreeBSD 5.3 up to 6.1 accidentally disables access restrictions when using the /var/yp/securenets file, which allows remote attackers to bypass intended access restrictions.

Affected products

FreeBSD: 5.3, 5.3-release, 5.3-releng, 5.3-stable, 5.4, 5.4-pre-release (+9)

References

http://secunia.com/advisories/20389
http://security.freebsd.org/advisories/FreeBSD-SA-06:15.ypserv.asc
http://securitytracker.com/id?1016193
http://www.osvdb.org/25852
http://www.securityfocus.com/bid/18204
https://exchange.xforce.ibmcloud.com/vulnerabilities/26792
http://secunia.com/advisories/20389
http://security.freebsd.org/advisories/FreeBSD-SA-06:15.ypserv.asc
http://securitytracker.com/id?1016193
http://www.osvdb.org/25852
http://www.securityfocus.com/bid/18204
https://exchange.xforce.ibmcloud.com/vulnerabilities/26792

Get alerted when CVE-2006-2655 or the next vulnerability affects your stack