Mandriva Linux Security Advisory : ncpfs (MDVSA-2010:061)

Multiple vulnerabilities has been found and corrected in ncpfs : sutil/ncpumount.c in ncpumount in ncpfs 2.2.6 produces certain detailed error messages about the results of privileged file-access attempts, which allows local users to determine the existence of arbitrary files via the mountpoint...

ncpfs multiple security vulnerabilities

DoS conditions, information disclosure...

ncpfs, Multiple Vulnerabilities

============================================ ncpfs, Multiple Vulnerabilities March 5, 2010 CVE-2010-0788, CVE-2010-0790, CVE-2010-0791 ============================================ ==Description== The ncpmount, ncpumount, and ncplogin utilities, installed as part of the ncpfs package, contain...

CVE-2010-0790

sutil/ncpumount.c in ncpumount in ncpfs 2.2.6 produces certain detailed error messages about the results of privileged file-access attempts, which allows local users to determine the existence of arbitrary files via the mountpoint name...

CVE-2010-0790

The CVE-2010-0790 issue affects the ncpfs package (sutil/ncpumount.c in ncpumount/ncpfs 2.2.6). It allows local users to infer the existence of arbitrary files by observing detailed error messages during privileged access attempts to a mountpoint. Multiple advisories (SUSE/OpenSUSE, Mandriva) des...

CVE-2010-0791

The CVE-2010-0791 issue affects ncpfs 2.2.6 (ncpmount, ncpumount, ncplogin). The root cause is improper creation of lock files, enabling local attackers to cause a denial of service via a /etc/mtab~ file that persists after exit. Related advisories (SUSE/openSUSE, Mandriva) document this alongsid...

CVE-2010-0790

sutil/ncpumount.c in ncpumount in ncpfs 2.2.6 produces certain detailed error messages about the results of privileged file-access attempts, which allows local users to determine the existence of arbitrary files via the mountpoint name...

CVE-2010-0791

The 1 ncpmount, 2 ncpumount, and 3 ncplogin programs in ncpfs 2.2.6 do not properly create lock files, which allows local users to cause a denial of service application failure via unspecified vectors that trigger the creation of a /etc/mtab file that persists after the program exits...

CVE-2010-0788

ncpfs 2.2.6 allows local users to cause a denial of service, obtain sensitive information, or possibly gain privileges via symlink attacks involving the 1 ncpmount and 2 ncpumount programs...

CVE-2010-0788

ncpfs 2.2.6 allows local users to cause a denial of service, obtain sensitive information, or possibly gain privileges via symlink attacks involving the 1 ncpmount and 2 ncpumount programs...

Information disclosure

ncpfs 2.2.6 allows local users to cause a denial of service, obtain sensitive information, or possibly gain privileges via symlink attacks involving the 1 ncpmount and 2 ncpumount programs...

CVE-2010-0788

CVE-2010-0788 affects ncpfs 2.2.6; local users can exploit symlink handling in ncpmount and ncpumount to cause a denial of service, leak information, or possibly gain privileges. The vulnerability is rooted in symlink-based manipulation during mount-related operations, enabling local privilege/es...

CVE-2009-3297

CVE-2009-3297 is rejected/not used per the Initial Description.

CVE-2010-0788

ncpfs 2.2.6 allows local users to cause a denial of service, obtain sensitive information, or possibly gain privileges via symlink attacks involving the 1 ncpmount and 2 ncpumount programs...

Fedora Update for ncpfs FEDORA-2010-1145

Check for the Version of ncpfs OpenVAS Vulnerability Test Fedora Update for ncpfs FEDORA-2010-1145 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Fedora Update for ncpfs FEDORA-2010-1145

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for ncpfs FEDORA-2010-1168

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for ncpfs FEDORA-2010-1168

Check for the Version of ncpfs OpenVAS Vulnerability Test Fedora Update for ncpfs FEDORA-2010-1168 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Mandriva Update for ncpfs MDVSA-2010:046 (ncpfs)

Check for the Version of ncpfs OpenVAS Vulnerability Test Mandriva Update for ncpfs MDVSA-2010:046 ncpfs Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Linux Security Advisory : ncpfs (MDVSA-2010:046)

A vulnerability has been found in ncpfs which can be exploited by local users to disclose potentially sensitive information, cause a DoS Denial of Service, and potentially gain escalated privileges CVE-2010-0788. Packages for 2008.0 are provided for Corporate Desktop 2008.0 customers. The updated...