Moderate: Red Hat Security Advisory: ncpfs security update

An updated ncpfs package is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ncpfs is a file system that understands the Novell NetWareTM NCP protocol. A bug was found in the way ncpfs handled file permissions. ncpfs did not...

RHEL 2.1 : ncpfs (RHSA-2005:371)

An updated ncpfs package is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ncpfs is a file system that understands the Novell NetWareTM NCP protocol. A bug was found in the way ncpfs handled file permissions. ncpfs did not...

CVE-2005-0013

nwclient.c in ncpfs before 2.2.6 does not drop root privileges before executing utilities using the NetWare client functions, which allows local users to gain privileges...

CVE-2005-0013

nwclient.c in ncpfs before 2.2.6 does not drop root privileges before executing utilities using the NetWare client functions, which allows local users to gain privileges...

GLSA-200501-44 : ncpfs: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200501-44 ncpfs: Multiple vulnerabilities Erik Sjolund discovered two vulnerabilities in the programs bundled with ncpfs: there is a potentially exploitable buffer overflow in ncplogin CAN-2005-0014, and due to a flaw in nwclient....

CVE-2005-0013

CVE-2005-0013 affects nwclient.c in ncpfs prior to version 2.2.6, where root privileges are not dropped before executing NetWare client utilities, enabling local privilege escalation. The vulnerability (base CVSS v2.0 7.2 HIGH) has been addressed by updated ncpfs packages (e.g., 2.2.6) across mul...

CVE-2005-0014

CVE-2005-0014 describes a buffer overflow in the NetWare client’s ncpfs component, specifically in ncplogin, prior to version 2.2.6. The flaw allows remote, unauthenticated attackers on a malicious NetWare server to execute arbitrary code on the affected client. Multiple sources confirm the issue...

CVE-2005-0013

nwclient.c in ncpfs before 2.2.6 does not drop root privileges before executing utilities using the NetWare client functions, which allows local users to gain privileges...

CVE-2005-0013: Undefined Security Weakness

nwclient.c in ncpfs before 2.2.6 does not drop root privileges before executing utilities using the NetWare client functions, which allows local users to gain privileges...

CVE-2005-0014: Undefined Security Weakness

Buffer overflow in ncplogin in ncpfs before 2.2.6 allows remote malicious NetWare servers to execute arbitrary code on the NetWare client...

DSA-665-1 ncpfs - missing privilege release

Bulletin has no description...

Debian DSA-665-1 : ncpfs - missing privilege release

Erik Sjolund discovered several bugs in ncpfs that provides utilities to use resources from NetWare servers of which one also applies to the stable Debian distribution. Due to accessing a configuration file without further checks with root permissions it is possible to read arbitrary files...

Mandrake Linux Security Advisory : ncpfs (MDKSA-2005:028)

Erik Sjolund discovered two vulnerabilities in programs bundled with ncpfs. Due to a flaw in nwclient.c, utilities that use the NetWare client functions insecurely access files with elevated privileges CVE-2005-0013, and there is a potentially exploitable buffer overflow in the ncplogin program...

Linux ncpfs Local Exploit

Exploit for linux platform in category local exploits ========================= Linux ncpfs Local Exploit ========================= !/bin/sh Had to remove local -r to get it to work via sh on my box Root's encrypted password was in toupper form but the super stated it worked fine for him Gentoo...

ncpfs: Multiple vulnerabilities

Background ncpfs is a NCP protocol network filesystem driver that allows access to NetWare services, to mount volumes of NetWare servers or print to NetWare print queues. Description Erik Sjolund discovered two vulnerabilities in the programs bundled with ncpfs: there is a potentially exploitable...

ncpfs < 2.2.6 (Gentoo / Linux) - Local Privilege Escalation

!/bin/sh Had to remove local -r to get it to work via sh on my box Root's encrypted password was in toupper form but the super stated it worked fine for him Gentoo with ncpfs 2.2.5 If it worked for you send an email to [email protected] /str0ke echo 'head1 by super' echo -e '==============\n'...

ncpfs 2.2.6 (Gentoo Linux) - Local Privilege Escalation

ncpfs 2.2.6 Gentoo Linux - Local Privilege Escalation !/bin/sh Had to remove local -r to get it to work via sh on my box Root's encrypted password was in toupper form but the super stated it worked fine for him Gentoo with ncpfs 2.2.5 If it worked for you send an email to [email protected] /str0ke...

CVE-2004-1079

Buffer overflow in 1 ncplogin and 2 ncpmap in nwclient.c for ncpfs 2.2.4, and possibly other versions, may allow local users to gain privileges via a long -T option...

ncpfs: Buffer overflow in ncplogin and ncpmap

Background ncpfs is a NCP protocol network filesystem that allows access to Netware services, for example to mount volumes of NetWare servers or print to NetWare print queues. Description Karol Wiesek discovered a buffer overflow in the handling of the '-T' option in the ncplogin and ncpmap...

GLSA-200412-09 : ncpfs: Buffer overflow in ncplogin and ncpmap

The remote host is affected by the vulnerability described in GLSA-200412-09 ncpfs: Buffer overflow in ncplogin and ncpmap Karol Wiesek discovered a buffer overflow in the handling of the '-T' option in the ncplogin and ncpmap utilities, which are both installed as SUID root by default. Impact : ...