ncpfs Multiple Local Denial of Service Vulnerabilities

Bugtraq ID:	53719
Class:	Design Error
CVE:	CVE-2011-1679 CVE-2011-1680
Remote:	No
Local:	Yes
Published:	Apr 09 2011 12:00AM
Updated:	Apr 09 2013 10:58AM
Credit:	Vincent Danen
Vulnerable:	ncpfs ncpfs 2.2.6 + MandrakeSoft Corporate Server 3.0 x86_64 + MandrakeSoft Corporate Server 3.0 x86_64 + MandrakeSoft Corporate Server 3.0 + MandrakeSoft Corporate Server 3.0 + Mandriva Linux Mandrake 10.1 x86_64 + Mandriva Linux Mandrake 10.1 + Mandriva Linux Mandrake 10.1 + Mandriva Linux Mandrake 10.0 AMD64 + Mandriva Linux Mandrake 10.0 AMD64 + Mandriva Linux Mandrake 10.0 + Mandriva Linux Mandrake 10.0 ncpfs ncpfs 2.2.5 + Debian Linux 3.0 sparc + Debian Linux 3.0 s/390 + Debian Linux 3.0 ppc + Debian Linux 3.0 mipsel + Debian Linux 3.0 mips + Debian Linux 3.0 m68k + Debian Linux 3.0 ia-64 + Debian Linux 3.0 ia-32 + Debian Linux 3.0 hppa + Debian Linux 3.0 arm + Debian Linux 3.0 alpha + Debian Linux 3.0 + Gentoo Linux ncpfs ncpfs 2.2.4 + Conectiva Linux 10.0 + Conectiva Linux 9.0 + Conectiva Linux 8.0 + Conectiva Linux Enterprise Edition 1.0 + S.u.S.E. Linux 8.1 + S.u.S.E. Linux 8.0 + S.u.S.E. Linux Connectivity Server + S.u.S.E. Linux Database Server 0 + S.u.S.E. Linux Desktop 1.0 + S.u.S.E. Linux Enterprise Server 9 + S.u.S.E. Linux Personal 9.2 + S.u.S.E. Linux Personal 9.1 + S.u.S.E. Linux Personal 9.0 x86_64 + S.u.S.E. Linux Personal 9.0 + S.u.S.E. Linux Personal 8.2 + SuSE SUSE Linux Enterprise Server 8 ncpfs ncpfs 2.2.3 ncpfs ncpfs 2.2.2 ncpfs ncpfs 2.2.1 ncpfs ncpfs 2.2 .18 + Debian Linux 3.0 sparc + Debian Linux 3.0 s/390 + Debian Linux 3.0 ppc + Debian Linux 3.0 mipsel + Debian Linux 3.0 mips + Debian Linux 3.0 m68k + Debian Linux 3.0 ia-64 + Debian Linux 3.0 ia-32 + Debian Linux 3.0 hppa + Debian Linux 3.0 arm + Debian Linux 3.0 alpha + Debian Linux 3.0 ncpfs ncpfs 2.2 + Debian Linux 3.0 sparc + Debian Linux 3.0 s/390 + Debian Linux 3.0 ppc + Debian Linux 3.0 mipsel + Debian Linux 3.0 mips + Debian Linux 3.0 m68k + Debian Linux 3.0 ia-64 + Debian Linux 3.0 ia-32 + Debian Linux 3.0 hppa + Debian Linux 3.0 arm + Debian Linux 3.0 alpha + Debian Linux 3.0 Mandriva Linux Mandrake 2011 x86_64 Mandriva Linux Mandrake 2011 Mandriva Linux Mandrake 2010.1 x86_64 Mandriva Linux Mandrake 2010.1 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5
Not Vulnerable:

ncpfs Multiple Local Denial of Service Vulnerabilities

ncpfs is prone to multiple local denial-of-service vulnerabilities.

A local attacker can exploit these issues to corrupt the '/etc/mtab' file or create a stale lock file ('/etc/mtab~') which prevents other users from mounting and unmounting file systems. This causes a denial-of-service condition.

ncpfs 2.2.6 and prior versions are vulnerable.

ncpfs Multiple Local Denial of Service Vulnerabilities

Attackers can use readily available tools to exploit these issues.

ncpfs Multiple Local Denial of Service Vulnerabilities

Solution:
Updates are available. Please see the references for more information.


Mandriva Linux Mandrake 2011 x86_64

• Mandriva ipxutils-2.2.6-11.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva lib64ncpfs-devel-2.2.6-11.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva lib64ncpfs2.3-2.2.6-11.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva ncpfs-2.2.6-11.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/

Mandriva Linux Mandrake 2011

• Mandriva ipxutils-2.2.6-11.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva libncpfs-devel-2.2.6-11.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva libncpfs2.3-2.2.6-11.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva ncpfs-2.2.6-11.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/

MandrakeSoft Enterprise Server 5

• Mandriva ipxutils-2.2.6-11.1mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva libncpfs-devel-2.2.6-11.1mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva libncpfs2.3-2.2.6-11.1mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva ncpfs-2.2.6-11.1mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/

Mandriva Linux Mandrake 2010.1

• Mandriva ipxutils-2.2.6-11.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva libncpfs-devel-2.2.6-11.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva libncpfs2.3-2.2.6-11.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva ncpfs-2.2.6-11.1mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/

Mandriva Linux Mandrake 2010.1 x86_64

• Mandriva ipxutils-2.2.6-11.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva lib64ncpfs-devel-2.2.6-11.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva lib64ncpfs2.3-2.2.6-11.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva ncpfs-2.2.6-11.1mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/

MandrakeSoft Enterprise Server 5 x86_64

• Mandriva ipxutils-2.2.6-11.1mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva lib64ncpfs-devel-2.2.6-11.1mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva lib64ncpfs2.3-2.2.6-11.1mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva ncpfs-2.2.6-11.1mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/

ncpfs Multiple Local Denial of Service Vulnerabilities

References:

• Bug 695927 - (CVE-2011-1679) CVE-2011-1679 ncpfs: ncpmount and ncpumount fail to (Vincent Danen)
  
• Bug 695932 - (CVE-2011-1680) CVE-2011-1680 ncpfs: ncpmount does not remove /etc/ (Vincent Danen)
  
• ncpfs Homepage (ncfps)