CVE-2005-0014

Properties

Published:
01.05.2005
Updated:
20.10.2005
Patch available:
Severity:
High
CVSS vector:
(AV:R/AC:L/Au:NR/C:P/I:P/A:P/B:N) Approximated
Product:
ncpfs: ncpfs
ncpfs: ncpfs
ncpfs: ncpfs
ncpfs: ncpfs
ncpfs: ncpfs

Vulnerability description

Buffer overflow in ncplogin in ncpfs before 2.2.6 allows remote malicious NetWare servers to execute arbitrary code on the NetWare client.

References:

CONFIRM: ftp://platan.vc.cvut.cz/pub/linux/ncpfs/Changes-2.2.6
GENTOO: http://www.gentoo.org/security/en/glsa/glsa-200501-44.xml
MANDRAKE: http://www.mandrakesoft.com/security/advisories?name=MDKSA-2005:028