[SECURITY] Fedora 11 Update: ncpfs-2.2.6-12.fc11

Ncpfs is a filesystem which understands the Novell NetWareTM NCP protocol. Functionally, NCP is used for NetWare the way NFS is used in the TCP/IP world. For a Linux system to mount a NetWare filesystem, it needs a special mount program. The ncpfs package contains such a mount program plus other...

SLES9: Security update for ncpfs

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: ncpfs ncpfs-devel More details may also be found by searching for keyword 5016079 within the SuSE Enterprise Server 9 patch database at...

SLES9: Security update for ncpfs

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: ncpfs ncpfs-devel For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5019909 with...

SLES9: Security update for ncpfs

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: ncpfs ncpfs-devel For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5019909 with...

SLES9: Security update for ncpfs

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: ncpfs ncpfs-devel More details may also be found by searching for keyword 5016079 within the SuSE Enterprise Server 9 patch database linked in the references...

SuSE9 Security Update : ncpfs (YOU Patch Number 9805)

This update fixes the following security issues : - a buffer overflow in ncplogin and ncpmap. Both applications are installed setuid-root on SuSE Linux, but only users of group 'trusted' are allowed to execute the binaries. If successfully exploited this vulnerabilities could be used to gain loca...

Gentoo Security Advisory GLSA 200501-44 (ncpfs)

The remote host is missing updates announced in advisory GLSA 200501-44. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200501-44 (ncpfs)

The remote host is missing updates announced in advisory GLSA 200501-44. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200412-09 (ncpfs)

The remote host is missing updates announced in advisory GLSA 200412-09. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux ncpfs Local Exploit

No description provided by source. !/bin/sh Had to remove local -r to get it to work via sh on my box Root's encrypted password was in toupper form but the super stated it worked fine for him Gentoo with ncpfs 2.2.5 If it worked for you send an email to [email protected] /str0ke echo 'head1 by...

Fedora Core 3 : ncpfs-2.2.4-4.FC3.1 (2005-435)

Fri Jun 17 2005 Jiri Ryska 2.2.4-4.FC3.1 - fixed getuid security bug CVE-2005-0014 - fixed security bug CVE-2004-1079 - Mon Apr 11 2005 Jiri Ryska 2.2.4-4.FC3 - fixed getuid security bug CVE-2005-0013 Note that Tenable Network Security has extracted the preceding description block directly from...

ipxutils, ncpfs security update

CentOS Errata and Security Advisory CESA-2005:371-01 An updated ncpfs package is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ncpfs is a file system that understands the Novell NetWareTM NCP protocol. A bug was found in the wa...

Moderate: Red Hat Security Advisory: ncpfs security update

An updated ncpfs package is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ncpfs is a file system that understands the Novell NetWareTM NCP protocol. A bug was found in the way ncpfs handled file permissions. ncpfs did not...

RHEL 2.1 : ncpfs (RHSA-2005:371)

An updated ncpfs package is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ncpfs is a file system that understands the Novell NetWareTM NCP protocol. A bug was found in the way ncpfs handled file permissions. ncpfs did not...

CVE-2005-0013

nwclient.c in ncpfs before 2.2.6 does not drop root privileges before executing utilities using the NetWare client functions, which allows local users to gain privileges...

CVE-2005-0013

nwclient.c in ncpfs before 2.2.6 does not drop root privileges before executing utilities using the NetWare client functions, which allows local users to gain privileges...

GLSA-200501-44 : ncpfs: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200501-44 ncpfs: Multiple vulnerabilities Erik Sjolund discovered two vulnerabilities in the programs bundled with ncpfs: there is a potentially exploitable buffer overflow in ncplogin CAN-2005-0014, and due to a flaw in nwclient....

CVE-2005-0014

CVE-2005-0014 describes a buffer overflow in the NetWare client’s ncpfs component, specifically in ncplogin, prior to version 2.2.6. The flaw allows remote, unauthenticated attackers on a malicious NetWare server to execute arbitrary code on the affected client. Multiple sources confirm the issue...

CVE-2005-0013

nwclient.c in ncpfs before 2.2.6 does not drop root privileges before executing utilities using the NetWare client functions, which allows local users to gain privileges...

CVE-2005-0013

CVE-2005-0013 affects nwclient.c in ncpfs prior to version 2.2.6, where root privileges are not dropped before executing NetWare client utilities, enabling local privilege escalation. The vulnerability (base CVSS v2.0 7.2 HIGH) has been addressed by updated ncpfs packages (e.g., 2.2.6) across mul...