Lucene search

K
centosCentOS ProjectCESA-2005:371-01
HistoryMay 17, 2005 - 11:02 p.m.

ipxutils, ncpfs security update

2005-05-1723:02:01
CentOS Project
lists.centos.org
55

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

24.5%

CentOS Errata and Security Advisory CESA-2005:371-01

Ncpfs is a file system that understands the Novell NetWare™ NCP
protocol.

A bug was found in the way ncpfs handled file permissions. ncpfs did not
sufficiently check if the file owner matched the user attempting to access
the file, potentially violating the file permissions. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name
CAN-2005-0013 to this issue.

All users of ncpfs are advised to upgrade to this updated package, which
contains backported fixes for this issue.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2005-May/073830.html

Affected packages:
ipxutils
ncpfs

OSVersionArchitecturePackageVersionFilename
CentOS2i386ipxutils< 2.2.0.18-6.EL2ipxutils-2.2.0.18-6.EL2.i386.rpm
CentOS2i386ncpfs< 2.2.0.18-6.EL2ncpfs-2.2.0.18-6.EL2.i386.rpm

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

24.5%