Description
sutil/ncpumount.c in ncpumount in ncpfs 2.2.6 produces certain detailed error messages about the results of privileged file-access attempts, which allows local users to determine the existence of arbitrary files via the mountpoint name.
References
- 20100305 ncpfs, Multiple Vulnerabilities mailing-list
- SUSE-SR:2010:013 vendor-advisory
- 20100305 ncpfs, Multiple Vulnerabilities mailing-list
- SUSE-SR:2010:012 vendor-advisory
- 38563 vdb-entry
- 20100305 Re: ncpfs, Multiple Vulnerabilities mailing-list