CVE-2002-1232

CVE-2002-1232 describes a memory leak vulnerability in ypserv versions prior to 2.5 within the NIS package 3.9 and earlier, affecting various Linux distributions including Debian, HP, and Red Hat. This flaw allows unauthenticated remote attackers to trigger a denial of service by sending numerous requests for non-existent NIS maps, leading to excessive memory consumption. While rated with a CVSS score of 5.0 (medium severity) and an EPSS score indicating low exploitability, there is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or KEV entry. However, the vulnerability has garnered significant community discussion, with 10 mentions, suggesting awareness despite the lack of public exploits.