CVE-2005-0013

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

nwclient.c in ncpfs before 2.2.6 does not drop root privileges before executing utilities using the NetWare client functions, which allows local users to gain privileges.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published
May 2, 2005
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2005

CVE-2005-00147.5Buffer overflow in ncplogin in ncpfs before 2.2.6 allows remote malicious NetWare servers to execute arbitrary code on the NetWare client.CVE-2005-00157.5diatheke.pl in Sword 1.5.7a allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.CVE-2005-00167.2Buffer overflow in the exported_display function in xatitv in gatos before 0.0.5 allows local users to execute arbitrary code.CVE-2005-00172.1The f2c translator in the f2c package 3.1 allows local users to read arbitrary files via a symlink attack on temporary files.CVE-2005-00182.1The f2 shell script in the f2c package 3.1 allows local users to read arbitrary files via a symlink attack on temporary files.CVE-2005-00194.6Unknown vulnerability in hztty 2.0 and earlier allows local users to execute arbitrary commands.CVE-2005-00207.2Buffer overflow in playmidi before 2.4 allows local users to execute arbitrary code.CVE-2005-00217.2Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via (1) an IPv6 address with more than 8 componeCVE-2005-00224.6Buffer overflow in the spa_base64_to_bits function in Exim before 4.43, as originally obtained from Samba code, and as called by the auth_spCVE-2005-00232.1gnome-pty-helper in GNOME libzvt2 and libvte4 allows local users to spoof the logon hostname via a modified DISPLAY environment variable. NOCVE-2005-00335.0Buffer overflow in the code for recursion and glue fetching in BIND 8.4.4 and 8.4.5 allows remote attackers to cause a denial of service (crCVE-2005-00344.3An "incorrect assumption" in the authvalidated validator function in BIND 9.3.0, when DNSSEC is enabled, allows remote attackers to cause a