CVE-2011-1679

LOW 3.3CVE-2011-1679 · Published 10/04/2011 · updated 16/06/2026

In short

CVE-2011-1679 is a LOW (CVSS 3.3) vulnerability affecting ncpfs (ncpfs).
Chance of exploitation in the next 30 days (EPSS): 0.37%, higher than 31.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ncpfs ncpfs	`= 2.2.1= 2.2.2= 2.2.3= 2.2.4= 2.2.5≤ 2.2.6`	No fix yet

Description

ncpfs 2.2.6 and earlier attempts to use (1) ncpmount to append to the /etc/mtab file and (2) ncpumount to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to trigger corruption of the /etc/mtab file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089.

References

openwall.com/lists/oss-security/2011/03/04/10 · Mailing List
openwall.com/lists/oss-security/2011/03/04/11 · Mailing List
openwall.com/lists/oss-security/2011/03/04/12 · Mailing List
openwall.com/lists/oss-security/2011/03/04/9 · Mailing List
openwall.com/lists/oss-security/2011/03/05/3 · Mailing List
openwall.com/lists/oss-security/2011/03/05/7 · Mailing List
openwall.com/lists/oss-security/2011/03/07/9 · Mailing List
openwall.com/lists/oss-security/2011/03/14/16 · Mailing List
openwall.com/lists/oss-security/2011/03/14/5 · Mailing List
openwall.com/lists/oss-security/2011/03/14/7 · Mailing List
openwall.com/lists/oss-security/2011/03/15/6 · Mailing List
openwall.com/lists/oss-security/2011/03/22/4

More vulnerabilities in ncpfs

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free