CVE-2010-0790

Related Files

Mandriva Linux Security Advisory 2010-061

Posted Mar 11, 2010

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2010-061 - sutil/ncpumount.c in ncpumount in ncpfs 2.2.6 produces certain detailed error messages about the results of privileged file-access attempts, which allows local users to determine the existence of arbitrary files via the mountpoint name. The (1) ncpmount, (2) ncpumount, and (3) ncplogin programs in ncpfs 2.2.6 do not properly create lock files, which allows local users to cause a denial of service (application failure) via unspecified vectors that trigger the creation of a /etc/mtab~ file that persists after the program exits. Packages for 2008.0 are provided for Corporate Desktop 2008.0 customers. The updated packages have been patched to correct these issues.

tags | advisory, denial of service, arbitrary, local

systems | linux, mandriva

advisories | CVE-2010-0790, CVE-2010-0791

SHA-256 | 83a7c75f3efeeada265c070ec394bf9bf7567b6d73f909255f2c65e4899eb5ae

Download | Favorite | View

ncpfs Race Conditions / Denial Of Service / Disclosure

Posted Mar 6, 2010

Authored by Dan Rosenberg

The ncpmount, ncpumount, and ncplogin utilities, installed as part of the ncpfs package, contain race conditions, information disclosures, and denial of service vulnerabilities.

tags | advisory, denial of service, vulnerability, info disclosure

advisories | CVE-2010-0788, CVE-2010-0790, CVE-2010-0791

SHA-256 | bee0a8f7594f3657d6643476cfedee7d3fee1c4555768af16fe7f3bde6ab4720

Download | Favorite | View