3.3

CVE-2011-1679

ncpfs 2.2.6 and earlier attempts to use (1) ncpmount to append to the /etc/mtab file and (2) ncpumount to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to trigger corruption of the /etc/mtab file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ncpfs ≫ Ncpfs Version <= 2.2.6
Ncpfs ≫ Ncpfs Version2.2.1
Ncpfs ≫ Ncpfs Version2.2.2
Ncpfs ≫ Ncpfs Version2.2.3
Ncpfs ≫ Ncpfs Version2.2.4
Ncpfs ≫ Ncpfs Version2.2.5
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.37% 0.29
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 3.3 3.4 4.9
AV:L/AC:M/Au:N/C:P/I:P/A:N
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://openwall.com/lists/oss-security/2011/03/04/10
Third Party Advisory
Mailing List
http://openwall.com/lists/oss-security/2011/03/04/11
Third Party Advisory
Mailing List
http://openwall.com/lists/oss-security/2011/03/04/12
Third Party Advisory
Mailing List
http://openwall.com/lists/oss-security/2011/03/04/9
Third Party Advisory
Mailing List
http://openwall.com/lists/oss-security/2011/03/05/3
Third Party Advisory
Mailing List
http://openwall.com/lists/oss-security/2011/03/05/7
Third Party Advisory
Mailing List
http://openwall.com/lists/oss-security/2011/03/07/9
Third Party Advisory
Mailing List
http://openwall.com/lists/oss-security/2011/03/14/16
Third Party Advisory
Mailing List
http://openwall.com/lists/oss-security/2011/03/14/5
Third Party Advisory
Mailing List
http://openwall.com/lists/oss-security/2011/03/14/7
Third Party Advisory
Mailing List
http://openwall.com/lists/oss-security/2011/03/15/6
Third Party Advisory
Mailing List
http://openwall.com/lists/oss-security/2011/03/22/4
Third Party Advisory
Mailing List
http://openwall.com/lists/oss-security/2011/03/22/6
Third Party Advisory
Mailing List
http://openwall.com/lists/oss-security/2011/03/31/3
Third Party Advisory
Mailing List
http://openwall.com/lists/oss-security/2011/03/31/4
Third Party Advisory
Mailing List
http://openwall.com/lists/oss-security/2011/04/01/2
Third Party Advisory
Mailing List
https://bugzilla.redhat.com/show_bug.cgi?id=688980
Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/66701