CVE-2010-0791: Low severity ncpfs ncpfs vulnerability
The (1) ncpmount, (2) ncpumount, and (3) ncplogin programs in ncpfs 2.2.6 do not properly create lock files, which allows local users to cause a denial of service (application failure) via unspecified vectors that trigger the creation of a /etc/mtab~ file that persists after the program exits.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0791?
CVE-2010-0791 is classified as a medium severity vulnerability due to its potential to cause a denial of service.
How do I fix CVE-2010-0791?
To fix CVE-2010-0791, you should upgrade to ncpfs version 2.2.7 or later, where the issue has been addressed.
What programs are affected by CVE-2010-0791?
CVE-2010-0791 affects the ncpmount, ncpumount, and ncplogin programs in ncpfs version 2.2.6.
What type of vulnerability is CVE-2010-0791?
CVE-2010-0791 is a local denial of service vulnerability primarily due to improper lock file creation.
Can CVE-2010-0791 be exploited remotely?
No, CVE-2010-0791 can only be exploited locally by users with access to the affected programs.