.:[ packet storm ]:.
                         
four continents, one idea
four continents, one idea

 ///  File Name:MDVSA-2010-061.txt
Description:
Mandriva Linux Security Advisory 2010-061 - sutil/ncpumount.c in ncpumount in ncpfs 2.2.6 produces certain detailed error messages about the results of privileged file-access attempts, which allows local users to determine the existence of arbitrary files via the mountpoint name. The (1) ncpmount, (2) ncpumount, and (3) ncplogin programs in ncpfs 2.2.6 do not properly create lock files, which allows local users to cause a denial of service (application failure) via unspecified vectors that trigger the creation of a /etc/mtab~ file that persists after the program exits. Packages for 2008.0 are provided for Corporate Desktop 2008.0 customers. The updated packages have been patched to correct these issues.
Author:Mandriva
Homepage:http://www.mandriva.com/security/
File Size:8905
Related CVE(s):CVE-2010-0790, CVE-2010-0791
Last Modified:Mar 11 17:30:57 2010
MD5 Checksum:8eddb3ad2d5d24403b0b99e52c566d3b

 .:. Back