DSA-665-1 ncpfs - missing privilege release

Bulletin has no description...

Debian DSA-665-1 : ncpfs - missing privilege release

Erik Sjolund discovered several bugs in ncpfs that provides utilities to use resources from NetWare servers of which one also applies to the stable Debian distribution. Due to accessing a configuration file without further checks with root permissions it is possible to read arbitrary files...

Mandrake Linux Security Advisory : ncpfs (MDKSA-2005:028)

Erik Sjolund discovered two vulnerabilities in programs bundled with ncpfs. Due to a flaw in nwclient.c, utilities that use the NetWare client functions insecurely access files with elevated privileges CVE-2005-0013, and there is a potentially exploitable buffer overflow in the ncplogin program...

ncpfs < 2.2.6 (Gentoo / Linux) - Local Privilege Escalation

!/bin/sh Had to remove local -r to get it to work via sh on my box Root's encrypted password was in toupper form but the super stated it worked fine for him Gentoo with ncpfs 2.2.5 If it worked for you send an email to [email protected] /str0ke echo 'head1 by super' echo -e '==============\n'...

ncpfs 2.2.6 (Gentoo Linux) - Local Privilege Escalation

ncpfs 2.2.6 Gentoo Linux - Local Privilege Escalation !/bin/sh Had to remove local -r to get it to work via sh on my box Root's encrypted password was in toupper form but the super stated it worked fine for him Gentoo with ncpfs 2.2.5 If it worked for you send an email to [email protected] /str0ke...

ncpfs: Multiple vulnerabilities

Background ncpfs is a NCP protocol network filesystem driver that allows access to NetWare services, to mount volumes of NetWare servers or print to NetWare print queues. Description Erik Sjolund discovered two vulnerabilities in the programs bundled with ncpfs: there is a potentially exploitable...

Linux ncpfs Local Exploit

Exploit for linux platform in category local exploits ========================= Linux ncpfs Local Exploit ========================= !/bin/sh Had to remove local -r to get it to work via sh on my box Root's encrypted password was in toupper form but the super stated it worked fine for him Gentoo...

CVE-2004-1079

Buffer overflow in 1 ncplogin and 2 ncpmap in nwclient.c for ncpfs 2.2.4, and possibly other versions, may allow local users to gain privileges via a long -T option...

ncpfs: Buffer overflow in ncplogin and ncpmap

Background ncpfs is a NCP protocol network filesystem that allows access to Netware services, for example to mount volumes of NetWare servers or print to NetWare print queues. Description Karol Wiesek discovered a buffer overflow in the handling of the '-T' option in the ncplogin and ncpmap...

GLSA-200412-09 : ncpfs: Buffer overflow in ncplogin and ncpmap

The remote host is affected by the vulnerability described in GLSA-200412-09 ncpfs: Buffer overflow in ncplogin and ncpmap Karol Wiesek discovered a buffer overflow in the handling of the '-T' option in the ncplogin and ncpmap utilities, which are both installed as SUID root by default. Impact : ...

CVE-2004-1079

Buffer overflow in 1 ncplogin and 2 ncpmap in nwclient.c for ncpfs 2.2.4, and possibly other versions, may allow local users to gain privileges via a long -T option...

CVE-2004-1079

CVE-2004-1079 is a buffer overflow in nwfs components (ncplogin and ncpmap) of ncpfs 2.2.4 (and possibly earlier/other versions) that may allow a local attacker to gain privileges via a long -T option. The vulnerability is rooted in nwclient.c; it affects the SUID-root utilities ncplogin and ncpm...

Mandrake Linux Security Advisory : kernel (MDKSA-2004:015)

Paul Staretz discovered a flaw in return value checking in the mremap function in the Linux kernel, versions 2.4.24 and previous that could allow a local user to obtain root privileges. A vulnerability was found in the R128 DRI driver by Alan Cox. This could allow local privilege escalation. A fl...

security flaw

Stack-based buffer overflow in the ncplookup function for ncpfs in Linux kernel 2.4.x allows local users to gain privileges...

CVE-2004-0010

Stack-based buffer overflow in the ncplookup function for ncpfs in Linux kernel 2.4.x allows local users to gain privileges...

CVE-2004-0010

This CVE describes a stack-based buffer overflow in the ncp_lookup function of ncpfs in Linux kernel 2.4.x, enabling local privilege escalation. The provided documents do not specify affected kernel versions beyond 2.4.x, nor remediation or exploit status. No connected documents add concrete tech...

Important: Red Hat Security Advisory: kernel security update

Updated kernel packages that fix a security vulnerability which may allow local users to gain root privileges are now available. Updated 5 March 2004 Added kernel-headers packages The Linux kernel handles the basic functions of the operating system. Paul Starzetz discovered a flaw in return value...