• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

NCPFS Local Buffer Overflow Vulnerability

Solution:

The vendor has released an upgrade dealing with this issue.

Please see the referenced advisories for further information.


ncpfs ncpfs 2.2 .18

• RedHat ipxutils-2.2.0.18-6.1.legacy.i386.rpm
  Red Hat Linux 7.3:
  http://download.fedoralegacy.org/redhat/7.3/updates/i386/ipxutils-2.2. 0.18-6.1.legacy.i386.rpm


• RedHat ncpfs-2.2.0.18-6.1.legacy.i386.rpm
  Red Hat Linux 7.3:
  http://download.fedoralegacy.org/redhat/7.3/updates/i386/ncpfs-2.2.0.1 8-6.1.legacy.i386.rpm

ncpfs ncpfs 2.2.1

• Mandrake ipxutils-2.2.6-0.1.C21mdk.i586.rpm
  Mandrake Corporate Server 2.1
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake ipxutils-2.2.6-0.1.C21mdk.x86_64.rpm
  Mandrake Corporate Server 2.1/x86_64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake ncpfs-2.2.6-0.1.C21mdk.i586.rpm
  Mandrake Corporate Server 2.1
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake ncpfs-2.2.6-0.1.C21mdk.x86_64.rpm
  Mandrake Corporate Server 2.1/x86_64
  http://www.mandrakesecure.net/en/ftp.php


• ncpfs ncpfs-2.2.5.tar.gz
  ftp://platan.vc.cvut.cz/pub/linux/ncpfs/ncpfs-2.2.5.tar.gz


• RedHat ipxutils-2.2.1-1.1.legacy.i386.rpm
  Red Hat Linux 9:
  http://download.fedoralegacy.org/redhat/9/updates/i386/ipxutils-2.2.1- 1.1.legacy.i386.rpm


• RedHat ncpfs-2.2.1-1.1.legacy.i386.rpm
  Red Hat Linux 9:
  http://download.fedoralegacy.org/redhat/9/updates/i386/ncpfs-2.2.1-1.1 .legacy.i386.rpm

ncpfs ncpfs 2.2.2

• ncpfs ncpfs-2.2.5.tar.gz
  ftp://platan.vc.cvut.cz/pub/linux/ncpfs/ncpfs-2.2.5.tar.gz

ncpfs ncpfs 2.2.3

• Mandrake ipxutils-2.2.6-0.1.100mdk.amd64.rpm
  Mandrake Linux 10.0/amd64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake ipxutils-2.2.6-0.1.100mdk.i586.rpm
  Mandrake Linux 10.0
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake ipxutils-2.2.6-0.1.C30mdk.i586.rpm
  Mandrake Corporate Server 3.0
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake ipxutils-2.2.6-0.1.C30mdk.x86_64.rpm
  Mandrake Corporate Server 3.0/x86_64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake lib64ncpfs2.3-2.2.6-0.1.100mdk.amd64.rpm
  Mandrake Linux 10.0/amd64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake lib64ncpfs2.3-2.2.6-0.1.C30mdk.x86_64.rpm
  Mandrake Corporate Server 3.0/x86_64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake lib64ncpfs2.3-devel-2.2.6-0.1.100mdk.amd64.rpm
  Mandrake Linux 10.0/amd64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake lib64ncpfs2.3-devel-2.2.6-0.1.C30mdk.x86_64.rpm
  Mandrake Corporate Server 3.0/x86_64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake libncpfs2.3-2.2.6-0.1.100mdk.i586.rpm
  Mandrake Linux 10.0
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake libncpfs2.3-2.2.6-0.1.C30mdk.i586.rpm
  Mandrake Corporate Server 3.0
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake libncpfs2.3-devel-2.2.6-0.1.100mdk.i586.rpm
  Mandrake Linux 10.0
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake libncpfs2.3-devel-2.2.6-0.1.C30mdk.i586.rpm
  Mandrake Corporate Server 3.0
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake ncpfs-2.2.6-0.1.100mdk.amd64.rpm
  Mandrake Linux 10.0/amd64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake ncpfs-2.2.6-0.1.100mdk.i586.rpm
  Mandrake Linux 10.0
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake ncpfs-2.2.6-0.1.C30mdk.i586.rpm
  Mandrake Corporate Server 3.0
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake ncpfs-2.2.6-0.1.C30mdk.x86_64.rpm
  Mandrake Corporate Server 3.0/x86_64
  http://www.mandrakesecure.net/en/ftp.php


• ncpfs ncpfs-2.2.5.tar.gz
  ftp://platan.vc.cvut.cz/pub/linux/ncpfs/ncpfs-2.2.5.tar.gz


• RedHat ipxutils-2.2.3-1.1.legacy.i386.rpm
  Fedora Core 1:
  http://download.fedoralegacy.org/fedora/1/updates/i386/ipxutils-2.2.3- 1.1.legacy.i386.rpm


• RedHat ncpfs-2.2.3-1.1.legacy.i386.rpm
  Fedora Core 1:
  http://download.fedoralegacy.org/fedora/1/updates/i386/ncpfs-2.2.3-1.1 .legacy.i386.rpm

ncpfs ncpfs 2.2.4

• Mandrake ipxutils-2.2.6-0.1.101mdk.i586.rpm
  Mandrake Linux 10.1
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake ipxutils-2.2.6-0.1.101mdk.x86_64.rpm
  Mandrake Linux 10.1/x86_64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake lib64ncpfs2.3-2.2.6-0.1.101mdk.x86_64.rpm
  Mandrake Linux 10.1/x86_64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake lib64ncpfs2.3-devel-2.2.6-0.1.101mdk.x86_64.rpm
  Mandrake Linux 10.1/x86_64
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake libncpfs2.3-2.2.6-0.1.101mdk.i586.rpm
  Mandrake Linux 10.1
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake libncpfs2.3-devel-2.2.6-0.1.101mdk.i586.rpm
  Mandrake Linux 10.1
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake ncpfs-2.2.6-0.1.101mdk.i586.rpm
  Mandrake Linux 10.1
  http://www.mandrakesecure.net/en/ftp.php


• Mandrake ncpfs-2.2.6-0.1.101mdk.x86_64.rpm
  Mandrake Linux 10.1/x86_64
  http://www.mandrakesecure.net/en/ftp.php


• ncpfs ncpfs-2.2.5.tar.gz
  ftp://platan.vc.cvut.cz/pub/linux/ncpfs/ncpfs-2.2.5.tar.gz


• RedHat ipxutils-2.2.4-1.1.legacy.i386.rpm
  Fedora Core 2:
  http://download.fedoralegacy.org/fedora/2/updates/i386/ipxutils-2.2.4- 1.1.legacy.i386.rpm


• RedHat ipxutils-2.2.4-5.FC3.1.legacy.i386.rpm
  Fedora Core 3:
  http://download.fedoralegacy.org/fedora/3/updates/i386/ipxutils-2.2.4- 5.FC3.1.legacy.i386.rpm


• RedHat ipxutils-2.2.4-5.FC3.1.legacy.x86_64.rpm
  Fedora Core 3:
  http://download.fedoralegacy.org/fedora/3/updates/x86_64/ipxutils-2.2. 4-5.FC3.1.legacy.x86_64.rpm


• RedHat ncpfs-2.2.4-1.1.legacy.i386.rpm
  Fedora Core 2:
  http://download.fedoralegacy.org/fedora/2/updates/i386/ncpfs-2.2.4-1.1 .legacy.i386.rpm


• RedHat ncpfs-2.2.4-5.FC3.1.legacy.i386.rpm
  Fedora Core 3:
  http://download.fedoralegacy.org/fedora/3/updates/i386/ncpfs-2.2.4-5.F C3.1.legacy.i386.rpm


• RedHat ncpfs-2.2.4-5.FC3.1.legacy.x86_64.rpm
  Fedora Core 3:
  http://download.fedoralegacy.org/fedora/3/updates/x86_64/ncpfs-2.2.4-5 .FC3.1.legacy.x86_64.rpm


• RedHat Fedora ipxutils-2.2.4-4.FC3.1.i386.rpm
  Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/


• RedHat Fedora ipxutils-2.2.4-4.FC3.1.x86_64.rpm
  Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/


• RedHat Fedora ncpfs-2.2.4-4.FC3.1.i386.rpm
  Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/


• RedHat Fedora ncpfs-2.2.4-4.FC3.1.x86_64.rpm
  Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/


• RedHat Fedora ncpfs-debuginfo-2.2.4-4.FC3.1.i386.rpm
  Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/


• RedHat Fedora ncpfs-debuginfo-2.2.4-4.FC3.1.x86_64.rpm
  Fedora Core 3
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/