CVE-2011-1680 | Vulnerability Database | Aqua Security

ncpmount in ncpfs 2.2.6 and earlier does not remove the /etc/mtab~ lock file after a failed attempt to add a mount entry, which has unspecified impact and local attack vectors.

Affected Software

Name	Vendor	Start Version	End Version
Ncpfs	Ncpfs	*	2.2.6 (including)
Ncpfs	Ncpfs	2.2.1 (including)	2.2.1 (including)
Ncpfs	Ncpfs	2.2.2 (including)	2.2.2 (including)
Ncpfs	Ncpfs	2.2.3 (including)	2.2.3 (including)
Ncpfs	Ncpfs	2.2.4 (including)	2.2.4 (including)
Ncpfs	Ncpfs	2.2.5 (including)	2.2.5 (including)

References

http://openwall.com/lists/oss-security/2011/03/04/10
http://openwall.com/lists/oss-security/2011/03/04/11
http://openwall.com/lists/oss-security/2011/03/04/12
http://openwall.com/lists/oss-security/2011/03/04/9
http://openwall.com/lists/oss-security/2011/03/05/3
http://openwall.com/lists/oss-security/2011/03/05/7
http://openwall.com/lists/oss-security/2011/03/07/9
http://openwall.com/lists/oss-security/2011/03/14/16
http://openwall.com/lists/oss-security/2011/03/14/5
http://openwall.com/lists/oss-security/2011/03/14/7
http://openwall.com/lists/oss-security/2011/03/15/6
http://openwall.com/lists/oss-security/2011/03/22/4
http://openwall.com/lists/oss-security/2011/03/22/6
http://openwall.com/lists/oss-security/2011/03/31/3
http://openwall.com/lists/oss-security/2011/03/31/4
http://openwall.com/lists/oss-security/2011/04/01/2
https://bugzilla.redhat.com/show_bug.cgi?id=688980
https://exchange.xforce.ibmcloud.com/vulnerabilities/66700

NVD	https://nvd.nist.gov/vuln/detail/CVE-2011-1680
CWE	https://cwe.mitre.org/data/definitions/264.html