Lucene search

[email protected]CVE-2011-1680

HistoryApr 10, 2011 - 2:55 a.m.

CVE-2011-1680

2011-04-1002:55:02

CWE-264

[email protected]

web.nvd.nist.gov

ncpmount

ncpfs

cve-2011-1680

security vulnerability

local attack vector

information security

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.1

Confidence

Low

EPSS

0.001

Percentile

42.3%

JSON

ncpmount in ncpfs 2.2.6 and earlier does not remove the /etc/mtab~ lock file after a failed attempt to add a mount entry, which has unspecified impact and local attack vectors.

Affected configurations

NVD

Node

ncpfsncpfsRange≤2.2.6

ncpfsncpfsMatch2.2.1

ncpfsncpfsMatch2.2.2

ncpfsncpfsMatch2.2.3

ncpfsncpfsMatch2.2.4

ncpfsncpfsMatch2.2.5

VendorProductVersionCPE
ncpfsncpfs2.2.2cpe:/a:ncpfs:ncpfs:2.2.2:::
ncpfsncpfs2.2.1cpe:/a:ncpfs:ncpfs:2.2.1:::
ncpfsncpfs2.2.3cpe:/a:ncpfs:ncpfs:2.2.3:::
ncpfsncpfs2.2.4cpe:/a:ncpfs:ncpfs:2.2.4:::
ncpfsncpfscpe:/a:ncpfs:ncpfs::::
ncpfsncpfs2.2.5cpe:/a:ncpfs:ncpfs:2.2.5:::

Vendor	Product	Version	CPE
ncpfs	ncpfs	2.2.2	cpe:/a:ncpfs:ncpfs:2.2.2:::
ncpfs	ncpfs	2.2.1	cpe:/a:ncpfs:ncpfs:2.2.1:::
ncpfs	ncpfs	2.2.3	cpe:/a:ncpfs:ncpfs:2.2.3:::
ncpfs	ncpfs	2.2.4	cpe:/a:ncpfs:ncpfs:2.2.4:::
ncpfs	ncpfs		cpe:/a:ncpfs:ncpfs::::
ncpfs	ncpfs	2.2.5	cpe:/a:ncpfs:ncpfs:2.2.5:::

References

openwall.com/lists/oss-security/2011/03/04/10

openwall.com/lists/oss-security/2011/03/04/11

openwall.com/lists/oss-security/2011/03/04/12

openwall.com/lists/oss-security/2011/03/04/9

openwall.com/lists/oss-security/2011/03/05/3

openwall.com/lists/oss-security/2011/03/05/7

openwall.com/lists/oss-security/2011/03/07/9

openwall.com/lists/oss-security/2011/03/14/16

openwall.com/lists/oss-security/2011/03/14/5

openwall.com/lists/oss-security/2011/03/14/7

openwall.com/lists/oss-security/2011/03/15/6

openwall.com/lists/oss-security/2011/03/22/4

openwall.com/lists/oss-security/2011/03/22/6

openwall.com/lists/oss-security/2011/03/31/3

openwall.com/lists/oss-security/2011/03/31/4

openwall.com/lists/oss-security/2011/04/01/2

bugzilla.redhat.com/show_bug.cgi?id=688980

exchange.xforce.ibmcloud.com/vulnerabilities/66700

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.1

Confidence

Low

EPSS

0.001

Percentile

42.3%

JSON

Related for CVE-2011-1680

ubuntucve1 nvd1 prion1 cvelist1 nessus7 openvas2