security flaw

🗓️ 12 May 2004 01:07:00Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 6 Views

Stack-based buffer overflow in ncp_lookup of ncpfs on linux kernel 2.4.x enables local privilege escalation.

Reporter	Title	Published	Views	Family All 139
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the Debian GNU/Linux operating system that allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information	6 Jul 201600:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	any	athlon	kernel	2.4.21-15.EL	kernel-2.4.21-15.EL.athlon.rpm
Red Hat Enterprise Linux	any	i686	kernel	2.4.21-15.EL	kernel-2.4.21-15.EL.i686.rpm
Red Hat Enterprise Linux	any	ia32e	kernel	2.4.21-15.EL	kernel-2.4.21-15.EL.ia32e.rpm
Red Hat Enterprise Linux	any	ia64	kernel	2.4.21-15.EL	kernel-2.4.21-15.EL.ia64.rpm
Red Hat Enterprise Linux	any	ppc64iseries	kernel	2.4.21-15.EL	kernel-2.4.21-15.EL.ppc64iseries.rpm
Red Hat Enterprise Linux	any	ppc64pseries	kernel	2.4.21-15.EL	kernel-2.4.21-15.EL.ppc64pseries.rpm
Red Hat Enterprise Linux	any	s390	kernel	2.4.21-15.EL	kernel-2.4.21-15.EL.s390.rpm
Red Hat Enterprise Linux	any	s390x	kernel	2.4.21-15.EL	kernel-2.4.21-15.EL.s390x.rpm
Red Hat Enterprise Linux	any	x86_64	kernel	2.4.21-15.EL	kernel-2.4.21-15.EL.x86_64.rpm
Red Hat Enterprise Linux	any	i386	kernel-boot	2.4.21-15.EL	kernel-boot-2.4.21-15.EL.i386.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2004-0010
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2004-0010
cve	www.cve.org/CVERecord

25 Jun 2026 10:32Current

6Medium risk

Vulners AI Score6

CVSS 27.2

EPSS0.00467

ncpfs vulnerability ncp_lookup overflow buffer overflow privilege escalation linux kernel