CVE-2011-1679: Input Validation
ncpfs 2.2.6 and earlier attempts to use (1) ncpmount to append to the /etc/mtab file and (2) ncpumount to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to trigger corruption of the /etc/mtab file via a process with a small RLIMITFSIZE value, a related issue to CVE-2011-1089.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1679?
CVE-2011-1679 has a medium severity due to potential local user risk of corruption of the /etc/mtab file.
How do I fix CVE-2011-1679?
To fix CVE-2011-1679, upgrade to ncpfs version 2.2.7 or later, where this vulnerability is addressed.
Who is affected by CVE-2011-1679?
CVE-2011-1679 affects users running ncpfs versions 2.2.6 and earlier.
What is the impact of CVE-2011-1679?
The impact of CVE-2011-1679 includes possible corruption of the /etc/mtab file, which can affect system stability.
Is CVE-2011-1679 a remote vulnerability?
No, CVE-2011-1679 is a local vulnerability that requires local user access to exploit.