ncpmount in ncpfs 2.2.6 and earlier does not remove the /etc/mtab~ lock file after a failed attempt to add a mount entry, which has unspecified impact and local attack vectors.

Following issues are fixed by this update: The ncpfs mount and umount programs were affected by the /etc/mtab truncation problems on RLIMIT_FSIZE. (CVE-2011-1679)

Also on errors, the mtab lock was not removed, blocking other applications from modifying /etc/mtab. (CVE-2011-1680)

Multiple vulnerabilities has been discovered and corrected in ncpfs :

ncpfs 2.2.6 and earlier attempts to use (1) ncpmount to append to the /etc/mtab file and (2) ncpumount to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to trigger corruption of the /etc/mtab file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089 (CVE-2011-1679).

ncpmount in ncpfs 2.2.6 and earlier does not remove the /etc/mtab~ lock file after a failed attempt to add a mount entry, which has unspecified impact and local attack vectors (CVE-2011-1680).

The updated packages have been patched to correct these issues.

Multiple vulnerabilities has been discovered and corrected in ncpfs :

ncpfs 2.2.6 and earlier attempts to use (1) ncpmount to append to the /etc/mtab file and (2) ncpumount to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to trigger corruption of the /etc/mtab file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089 (CVE-2011-1679).

ncpmount in ncpfs 2.2.6 and earlier does not remove the /etc/mtab~ lock file after a failed attempt to add a mount entry, which has unspecified impact and local attack vectors (CVE-2011-1680).

The updated packages have been patched to correct this issue.

Following issues are fixed by this update :

  - The ncpfs mount and umount programs were affected by the     /etc/mtab truncation problems on RLIMIT_FSIZE.
    (CVE-2011-1679)

  - on errors, the mtab lock was not removed, blocking other     applications from modifying /etc/mtab. (CVE-2011-1680)

  - we now keep the connection socket alive to avoid losing     ncpfs mounts. (bnc#621810)

Following issues are fixed by this update :

  - The ncpfs mount and umount programs were affected by the     /etc/mtab truncation problems on RLIMIT_FSIZE.
    (CVE-2011-1679)

  - on errors, the mtab lock was not removed, blocking other     applications from modifying /etc/mtab. (CVE-2011-1680)

  - we now keep the connection socket alive to avoid losing     ncpfs mounts (bnc#621810)

ID	Name	Product	Family	Severity
75974	openSUSE Security Update : ncpfs (openSUSE-SU-2011:0985-1)	Nessus	SuSE Local Security Checks	medium
75680	openSUSE Security Update : ncpfs (openSUSE-SU-2011:0985-1)	Nessus	SuSE Local Security Checks	medium
66062	Mandriva Linux Security Advisory : ncpfs (MDVSA-2013:048)	Nessus	Mandriva Local Security Checks	medium
59305	Mandriva Linux Security Advisory : ncpfs (MDVSA-2012:084)	Nessus	Mandriva Local Security Checks	medium
57231	SuSE 10 Security Update : ncpfs (ZYPP Patch Number 7711)	Nessus	SuSE Local Security Checks	medium
57120	SuSE 11.1 Security Update : ncpfs (SAT Patch Number 5045)	Nessus	SuSE Local Security Checks	medium
56610	SuSE 10 Security Update : ncpfs (ZYPP Patch Number 7710)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2011-1680

high

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium