Approved changes feed: RSS · Atom

cpe:2.3:a:ncpfs:ncpfs:2.2.6:*:*:*:*:*:*:*

part: a version: 2.2.6 update: *

VendorNcpfs (c4306dd0-9ae0-5aff-92c0-409490f55ae7)
ProductNcpfs (c0a387eb-d9da-5609-af01-7fd6b6f9265f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:rpm/opensuse/ncpfs purl2cpe 2026-06-01 10:12:41.448633

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-0791 vulnerable 2026-06-08 04:52:04.518055 Details available
The (1) ncpmount, (2) ncpumount, and (3) ncplogin programs in ncpfs 2.2.6 do not properly create lock files, which allows local users to cause a denial of service (application failure) via unspecified vectors that trigger the creation of a /etc/mtab~ file that persists after the program exits.
Published: 2010-03-09T19:00:00.000Z
Updated: 2024-08-07T00:59:39.076Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0790 vulnerable 2026-06-08 04:52:04.517696 Details available
sutil/ncpumount.c in ncpumount in ncpfs 2.2.6 produces certain detailed error messages about the results of privileged file-access attempts, which allows local users to determine the existence of arbitrary files via the mountpoint name.
Published: 2010-03-09T19:00:00.000Z
Updated: 2024-08-07T00:59:39.121Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0788 vulnerable 2026-06-08 04:52:04.500260 Details available
ncpfs 2.2.6 allows local users to cause a denial of service, obtain sensitive information, or possibly gain privileges via symlink attacks involving the (1) ncpmount and (2) ncpumount programs.
Published: 2010-03-02T18:00:00.000Z
Updated: 2024-08-07T00:59:39.323Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.