PT-2005-5568 · Novell · Ncpfs

Erik Sjolund · Published 1970-01-01 · Updated 2018-10-19 · CVE-2005-0013

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ncpfs versions prior to 2.2.6 ncpfs-2.2.0.18

Description The issue concerns multiple vulnerabilities in the ncpfs package, which can be exploited by a local attacker to compromise the confidentiality, integrity, and availability of protected information. The vulnerabilities can be exploited locally.

Recommendations For ncpfs versions prior to 2.2.6, update to version 2.2.6 or later to resolve the issue. For ncpfs-2.2.0.18, consider disabling the vulnerable functions until a patch is available. As a temporary workaround, consider restricting access to the ncpfs package to minimize the risk of exploitation.

Fix

Related Identifiers

BDU:2015-02564

BDU:2015-02565

BDU:2015-06833

CVE-2005-0013

DSA-665-1

Affected Products

Ncpfs

References · 16

• http://gentoo.org/security/en/glsa/glsa-200501-44.xml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-0013 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0013 · Security Note
• https://bdu.fstec.ru/vul/2015-06833 · Security Note
• https://bdu.fstec.ru/vul/2015-02565 · Security Note
• http://mandriva.com/security/advisories?name=MDKSA-2005:028 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02564 · Security Note
• http://redhat.com/support/errata/RHSA-2005-371.html · Vendor Advisory
• http://securityfocus.com/archive/1/433927/100/0/threaded · Vendor Advisory
• http://osvdb.org/13297 · Note
• ftp://platan.vc.cvut.cz/pub/linux/ncpfs/Changes-2.2.6 · Note
• http://securityfocus.com/bid/12400 · Note
• https://rhn.redhat.com/errata/RHSA-2005-371.html · Note
• http://debian.org/security/dsa-665 · Note
• http://securitytracker.com/id?1013019 · Note