openSUSE Security Update : ncpfs (openSUSE-SU-2010:0264-1)

This update fixes three security issues in ncpfs : Fixed a information leakage on mount CVE-2010-0790 / bnc583536 Fixed a mtab locking problem CVE-2010-0791 / bnc583536 Fixed a race condition in ncpfs mounts CVE-2010-0788 / bnc550004 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

openSUSE Security Update : ncpfs (openSUSE-SU-2010:0264-1)

This update fixes three security issues in ncpfs : Fixed a information leakage on mount CVE-2010-0790 / bnc583536 Fixed a mtab locking problem CVE-2010-0791 / bnc583536 Fixed a race condition in ncpfs mounts CVE-2010-0788 / bnc550004 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

openSUSE Security Update : ncpfs (openSUSE-SU-2010:0264-1)

This update fixes three security issues in ncpfs : Fixed a information leakage on mount CVE-2010-0790 / bnc583536 Fixed a mtab locking problem CVE-2010-0791 / bnc583536 Fixed a race condition in ncpfs mounts CVE-2010-0788 / bnc550004 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Mandriva Update for ncpfs MDVSA-2010:061 (ncpfs)

Check for the Version of ncpfs OpenVAS Vulnerability Test Mandriva Update for ncpfs MDVSA-2010:061 ncpfs Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Update for ncpfs MDVSA-2010:061 (ncpfs)

Check for the Version of ncpfs OpenVAS Vulnerability Test Mandriva Update for ncpfs MDVSA-2010:061 ncpfs Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Linux Security Advisory : ncpfs (MDVSA-2010:061)

Multiple vulnerabilities has been found and corrected in ncpfs : sutil/ncpumount.c in ncpumount in ncpfs 2.2.6 produces certain detailed error messages about the results of privileged file-access attempts, which allows local users to determine the existence of arbitrary files via the mountpoint...

ncpfs, Multiple Vulnerabilities

============================================ ncpfs, Multiple Vulnerabilities March 5, 2010 CVE-2010-0788, CVE-2010-0790, CVE-2010-0791 ============================================ ==Description== The ncpmount, ncpumount, and ncplogin utilities, installed as part of the ncpfs package, contain...

ncpfs multiple security vulnerabilities

DoS conditions, information disclosure...

CVE-2010-0790

sutil/ncpumount.c in ncpumount in ncpfs 2.2.6 produces certain detailed error messages about the results of privileged file-access attempts, which allows local users to determine the existence of arbitrary files via the mountpoint name...

CVE-2010-0790

sutil/ncpumount.c in ncpumount in ncpfs 2.2.6 produces certain detailed error messages about the results of privileged file-access attempts, which allows local users to determine the existence of arbitrary files via the mountpoint name...

CVE-2010-0791

The 1 ncpmount, 2 ncpumount, and 3 ncplogin programs in ncpfs 2.2.6 do not properly create lock files, which allows local users to cause a denial of service application failure via unspecified vectors that trigger the creation of a /etc/mtab file that persists after the program exits...

CVE-2010-0790

The CVE-2010-0790 issue affects the ncpfs package (sutil/ncpumount.c in ncpumount/ncpfs 2.2.6). It allows local users to infer the existence of arbitrary files by observing detailed error messages during privileged access attempts to a mountpoint. Multiple advisories (SUSE/OpenSUSE, Mandriva) des...

CVE-2010-0791

The CVE-2010-0791 issue affects ncpfs 2.2.6 (ncpmount, ncpumount, ncplogin). The root cause is improper creation of lock files, enabling local attackers to cause a denial of service via a /etc/mtab~ file that persists after exit. Related advisories (SUSE/openSUSE, Mandriva) document this alongsid...

CVE-2010-0790: Exposure of Sensitive Information to an Unauthorized Actor

sutil/ncpumount.c in ncpumount in ncpfs 2.2.6 produces certain detailed error messages about the results of privileged file-access attempts, which allows local users to determine the existence of arbitrary files via the mountpoint name...

CVE-2010-0791: Undefined Security Weakness

The 1 ncpmount, 2 ncpumount, and 3 ncplogin programs in ncpfs 2.2.6 do not properly create lock files, which allows local users to cause a denial of service application failure via unspecified vectors that trigger the creation of a /etc/mtab file that persists after the program exits...

CVE-2010-0788

ncpfs 2.2.6 allows local users to cause a denial of service, obtain sensitive information, or possibly gain privileges via symlink attacks involving the 1 ncpmount and 2 ncpumount programs...

CVE-2010-0788

ncpfs 2.2.6 allows local users to cause a denial of service, obtain sensitive information, or possibly gain privileges via symlink attacks involving the 1 ncpmount and 2 ncpumount programs...

Information disclosure

ncpfs 2.2.6 allows local users to cause a denial of service, obtain sensitive information, or possibly gain privileges via symlink attacks involving the 1 ncpmount and 2 ncpumount programs...

CVE-2010-0788

CVE-2010-0788 affects ncpfs 2.2.6; local users can exploit symlink handling in ncpmount and ncpumount to cause a denial of service, leak information, or possibly gain privileges. The vulnerability is rooted in symlink-based manipulation during mount-related operations, enabling local privilege/es...

CVE-2010-0788

ncpfs 2.2.6 allows local users to cause a denial of service, obtain sensitive information, or possibly gain privileges via symlink attacks involving the 1 ncpmount and 2 ncpumount programs...