Aggregates CVE and security vulnerability intelligence across all ncpfs-related products, including CVSS, EPSS, publication dates, and vulnerability intelligence data.
Historical issues mainly involve vendor risk path handling and vendor risk input validation and related problems; some flaws may lead to vendor impact unexpected behavior, affecting vendor surface production workloads scenarios.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2011-1680 | ncpmount in ncpfs 2.2.6 and earlier does not remove the /etc/mtab~ lock file after a failed attempt to add a mount entry, which has unspecified impact and local attack vectors. | [email protected] | 4.4 | 0.15% | 2011-04-10 | 2026-04-29 |
| CVE-2011-1679 | ncpfs 2.2.6 and earlier attempts to use (1) ncpmount to append to the /etc/mtab file and (2) ncpumount to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to trigger corruption of the /etc/mtab file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089. | [email protected] | 3.3 | 0.08% | 2011-04-10 | 2026-04-29 |
| CVE-2010-0791 | The (1) ncpmount, (2) ncpumount, and (3) ncplogin programs in ncpfs 2.2.6 do not properly create lock files, which allows local users to cause a denial of service (application failure) via unspecified vectors that trigger the creation of a /etc/mtab~ file that persists after the program exits. | [email protected] | 2.1 | 0.06% | 2010-03-10 | 2026-04-29 |
| CVE-2010-0790 | sutil/ncpumount.c in ncpumount in ncpfs 2.2.6 produces certain detailed error messages about the results of privileged file-access attempts, which allows local users to determine the existence of arbitrary files via the mountpoint name. | [email protected] | 2.1 | 0.07% | 2010-03-10 | 2026-04-29 |
| CVE-2010-0788 | ncpfs 2.2.6 allows local users to cause a denial of service, obtain sensitive information, or possibly gain privileges via symlink attacks involving the (1) ncpmount and (2) ncpumount programs. | [email protected] | 4.4 | 0.21% | 2010-03-02 | 2026-04-29 |
| CVE-2005-0014 | Buffer overflow in ncplogin in ncpfs before 2.2.6 allows remote malicious NetWare servers to execute arbitrary code on the NetWare client. | [email protected] | 7.5 | 1.83% | 2005-05-02 | 2026-04-16 |
| CVE-2005-0013 | nwclient.c in ncpfs before 2.2.6 does not drop root privileges before executing utilities using the NetWare client functions, which allows local users to gain privileges. | [email protected] | 7.2 | 0.28% | 2005-05-02 | 2026-04-16 |
| CVE-2004-1079 | Buffer overflow in (1) ncplogin and (2) ncpmap in nwclient.c for ncpfs 2.2.4, and possibly other versions, may allow local users to gain privileges via a long -T option. | [email protected] | 7.2 | 0.06% | 2005-01-10 | 2026-04-16 |