彙總 ncpfs 相關全部產品的 CVE 與安全漏洞情報，包括 CVSS、EPSS、公開時間與漏洞情報資料。
歷史漏洞主要涉及 路徑處理缺陷與輸入驗證問題 等問題，部分漏洞可能導致 異常行為，並影響 生產負載與軟體部署 相關場景。
相關漏洞資料主要來源於公開漏洞披露與安全公告，可用於評估歷史漏洞暴露面與修補優先順序。
| CVE | 摘要 | 來源 | 最高 CVSS | EPSS % | 公開時間 | 更新時間 |
|---|---|---|---|---|---|---|
| CVE-2011-1680 | ncpmount in ncpfs 2.2.6 and earlier does not remove the /etc/mtab~ lock file after a failed attempt to add a mount entry, which has unspecified impact and local attack vectors. | [email protected] | 4.4 | 0.47% | 2011-04-09 | 2026-06-16 |
| CVE-2011-1679 | ncpfs 2.2.6 and earlier attempts to use (1) ncpmount to append to the /etc/mtab file and (2) ncpumount to append to the /etc/mtab.tmp file without first checking whether resource limits would interfere, which allows local users to trigger corruption of the /etc/mtab file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089. | [email protected] | 3.3 | 0.37% | 2011-04-09 | 2026-06-16 |
| CVE-2010-0791 | The (1) ncpmount, (2) ncpumount, and (3) ncplogin programs in ncpfs 2.2.6 do not properly create lock files, which allows local users to cause a denial of service (application failure) via unspecified vectors that trigger the creation of a /etc/mtab~ file that persists after the program exits. | [email protected] | 2.1 | 0.36% | 2010-03-10 | 2026-06-16 |
| CVE-2010-0790 | sutil/ncpumount.c in ncpumount in ncpfs 2.2.6 produces certain detailed error messages about the results of privileged file-access attempts, which allows local users to determine the existence of arbitrary files via the mountpoint name. | [email protected] | 2.1 | 0.33% | 2010-03-10 | 2026-06-16 |
| CVE-2010-0788 | ncpfs 2.2.6 allows local users to cause a denial of service, obtain sensitive information, or possibly gain privileges via symlink attacks involving the (1) ncpmount and (2) ncpumount programs. | [email protected] | 4.4 | 0.68% | 2010-03-02 | 2026-06-16 |
| CVE-2005-0014 | Buffer overflow in ncplogin in ncpfs before 2.2.6 allows remote malicious NetWare servers to execute arbitrary code on the NetWare client. | [email protected] | 7.5 | 2.86% | 2005-05-02 | 2026-06-16 |
| CVE-2005-0013 | nwclient.c in ncpfs before 2.2.6 does not drop root privileges before executing utilities using the NetWare client functions, which allows local users to gain privileges. | [email protected] | 7.2 | 0.54% | 2005-05-02 | 2026-06-16 |
| CVE-2004-1079 | Buffer overflow in (1) ncplogin and (2) ncpmap in nwclient.c for ncpfs 2.2.4, and possibly other versions, may allow local users to gain privileges via a long -T option. | [email protected] | 7.2 | 0.40% | 2005-01-10 | 2026-06-16 |