AOH :: HP Unsorted N :: BU-1942.HTM

ncpfs, Multiple Vulnerabilities



ncpfs, Multiple Vulnerabilities
ncpfs, Multiple Vulnerabilities



--00032555850ae47cf7048110ba94
Content-Type: text/plain; charset=ISO-8859-1

=========================================== ncpfs, Multiple Vulnerabilities
 March 5, 2010
 CVE-2010-0788, CVE-2010-0790, CVE-2010-0791
===========================================
==Description=
The ncpmount, ncpumount, and ncplogin utilities, installed as part of the ncpfs
package, contain several vulnerabilities.

1. ncpmount, ncpumount, and ncplogin are vulnerable to race conditions that
allow a local attacker to unmount arbitrary mountpoints, causing
denial-of-service, or mount Netware shares to arbitrary directories,
potentially leading to root compromise.  This issue was formerly assigned
CVE-2009-3297, but has since been re-assigned CVE-2010-0788 to avoid overlap
with related bugs in other packages.

2. ncpumount is vulnerable to an information disclosure vulnerability that
allows a local attacker to verify the existence of arbitrary files, violating
directory permissions.  This issue has been assigned CVE-2010-0790.

3. ncpmount, ncpumount, and ncplogin create lockfiles insecurely, allowing a
local attacker to leave a stale lockfile at /etc/mtab~, causing other mount
utilities to fail and creating denial-of-service conditions.  This issue has
been assigned CVE-2010-0791.

==Workaround=
If unprivileged users do not need the ability to mount and unmount Netware
shares, then the suid bit should be removed from these utilities.

==Solution=
A patch has been released that resolves these issues (attached to this
advisory).  ncpfs-2.2.6.partial.patch is intended for ncpfs releases that have
already been patched against the first vulnerability in this report
(CVE-2010-0788, formerly CVE-2009-3297).  It has been tested against the latest
ncpfs packages distributed by Fedora, Red Hat, and Mandriva.
ncpfs-2.2.6.full.patch is intended for ncpfs releases that have not been
patched against any of these vulnerabilities.  It has been tested against the
latest ncpfs packages distributed by Debian, Ubuntu, and the upstream release
(ftp://platan.vc.cvut.cz/pub/linux/ncpfs/). 

Users are advised to recompile from source, or request updated packages from
downstream distributors.

==Credits=
These vulnerabilities were discovered by Dan Rosenberg
(dan.j.rosenberg@gmail.com). 
Thanks to Vitezslav Crhonek for the patch against the first issue.

==References=
CVE identifiers CVE-2010-0788, CVE-2010-0790, and CVE-2010-0791 have been
assigned to these issues.

--00032555850ae47cf7048110ba94
Content-Type: text/x-patch; charset=US-ASCII; name="ncpfs-2.2.6.full.patch"
Content-Disposition: attachment; filename="ncpfs-2.2.6.full.patch"
Content-Transfer-Encoding: base64
X-Attachment-Id: f_g6f8i6ea0
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--00032555850ae47cf7048110ba94
Content-Type: text/x-patch; charset=US-ASCII; name="ncpfs-2.2.6.partial.patch"
Content-Disposition: attachment; filename="ncpfs-2.2.6.partial.patch"
Content-Transfer-Encoding: base64
X-Attachment-Id: f_g6f8i9w71
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--00032555850ae47cf7048110ba94--

The entire AOH site is optimized to look best in Firefox® 3 on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH
We do not send spam. If you have received spam bearing an artofhacking.com email address, please forward it with full headers to abuse@artofhacking.com.