|
|
| |
|
| |
ncpfs: privilege escalation
| Package(s): | ncpfs |
CVE #(s): | CVE-2009-3297
|
| Created: | January 28, 2010 |
Updated: | March 1, 2011 |
| Description: |
From the Red Hat bugzilla entry:
Ronald Volgers found a race condition in the samba-client's
mount.cifs utility. Local, unprivileged user could use this
flaw to conduct symlink attacks, leading to disclosure of
sensitive information, or, possibly to privilege escalation.
|
| Alerts: |
|
( Log in to post comments)
|
|
|