Vulnerability in Ncpfs
CVE-2005-0013
nwclient.c in ncpfs before 2.2.6 does not drop root privileges before executing utilities using the NetWare client functions, which allows local users to gain privileges.
EPSS: 0.005 (42.5th percentile) — read the EPSS interpretation.
Affected products
- Ncpfs — versions 2.2.1, 2.2.2, 2.2.3
- N/a — versions n/a
References
- cve@mitre.org (vendor-advisory, Patch, x_refsource_DEBIAN)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (x_refsource_FEDORA, vendor-advisory)
- cve@mitre.org (vendor-advisory, x_refsource_MANDRAKE)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (vendor-advisory, x_refsource_GENTOO, Vendor Advisory)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory)