OSVDB ID: 13297

Title: ncpfs nwclient.c Based Utilities Arbitrary Privileged File Access

Info

Disclosure

Jan 30, 2005

Discovery

Unknown

Dates

Exploit

Jan 30, 2005

Solution

Unknown

Description

Classification

Location: Local Access Required
Impact: Loss of Confidentiality
Solution: Upgrade
Disclosure: Vendor Verified

Solution

Upgrade to version 2.2.6 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Unknown or Incomplete

References

Security Tracker: 1013019
Related OSVDB ID: 13298
Secunia Advisory ID: 14068 14070 14111 16484
CVE ID: 2005-0013 (see also: NVD)
Mail List Post: http://archives.neohapsis.com/archives/fulldisclosure/2005-01/0904.html
Vendor Specific Advisory URL: http://rhn.redhat.com/errata/RHSA-2005-371.html
http://www.debian.org/security/2005/dsa-665
Other Advisory URL: http://security.gentoo.org/glsa/glsa-200501-44.xml
http://www.mandrakesoft.com/security/advisories?name=MDKSA-2005:028

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/13297