PT-2005-1150 · Novell · Ncpfs

Erik Sjolund · Published 2005-02-06 · Updated 2018-10-19 · CVE-2005-0014

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ncpfs versions prior to 2.2.6

Description A buffer overflow issue in the ncplogin component of ncpfs allows remote malicious NetWare servers to execute arbitrary code on the NetWare client.

Recommendations For versions prior to 2.2.6, update to version 2.2.6 or later to resolve the issue.

Fix

Related Identifiers

CVE-2005-0014

Affected Products

Ncpfs

References · 8

• http://gentoo.org/security/en/glsa/glsa-200501-44.xml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-0014 · Security Note
• http://securityfocus.com/archive/1/433927/100/0/threaded · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2005:028 · Vendor Advisory
• ftp://platan.vc.cvut.cz/pub/linux/ncpfs/Changes-2.2.6 · Note
• http://securitytracker.com/id?1013019 · Note
• http://securityfocus.com/bid/12400 · Note
• http://osvdb.org/13298 · Note