CVE-2011-1679
ncpfs 2.2.6 and earlier attempts to use (1) ncpmount to append to the /etc/mtab file and (2) ncpumount to append to the /etc/mtab.tmp file w
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
ncpfs 2.2.6 and earlier attempts to use (1) ncpmount to append to the /etc/mtab file and (2) ncpumount to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to trigger corruption of the /etc/mtab file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089.
Timeline
- CVE published
- Record last updated
Affected versions
- n/a n/a
Version range not reported
References 18
openwall.com
- lists/oss-security/2011/03/14/5
- lists/oss-security/2011/03/04/9
- lists/oss-security/2011/03/22/6
- lists/oss-security/2011/03/22/4
- lists/oss-security/2011/03/05/7
- lists/oss-security/2011/03/07/9
- lists/oss-security/2011/04/01/2
- lists/oss-security/2011/03/04/10
- lists/oss-security/2011/03/14/16
- lists/oss-security/2011/03/31/4
- lists/oss-security/2011/03/04/12
- lists/oss-security/2011/03/14/7
- lists/oss-security/2011/03/04/11
- lists/oss-security/2011/03/05/3
- lists/oss-security/2011/03/31/3
- lists/oss-security/2011/03/15/6