3 matches found
CVE-2005-0013
nwclient.c in ncpfs before 2.2.6 does not drop root privileges before executing utilities using the NetWare client functions, which allows local users to gain privileges...
CVE-2005-0013
CVE-2005-0013 affects nwclient.c in ncpfs prior to version 2.2.6, where root privileges are not dropped before executing NetWare client utilities, enabling local privilege escalation. The vulnerability (base CVSS v2.0 7.2 HIGH) has been addressed by updated ncpfs packages (e.g., 2.2.6) across mul...
CVE-2004-1079
CVE-2004-1079 is a buffer overflow in nwfs components (ncplogin and ncpmap) of ncpfs 2.2.4 (and possibly earlier/other versions) that may allow a local attacker to gain privileges via a long -T option. The vulnerability is rooted in nwclient.c; it affects the SUID-root utilities ncplogin and ncpm...