-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 _______________________________________________________________________

 Mandriva Linux Security Advisory                         MDVSA-2010:046
 http://www.mandriva.com/security/
 _______________________________________________________________________

 Package : ncpfs
 Date    : February 23, 2010
 Affected: 2008.0, 2009.0, 2009.1, 2010.0, Corporate 4.0,
           Enterprise Server 5.0, Multi Network Firewall 2.0
 _______________________________________________________________________

 Problem Description:

 A vulnerability has been found in ncpfs which can be exploited by
 local users to disclose potentially sensitive information, cause a
 DoS (Denial of Service), and potentially gain escalated privileges
 (CVE-2009-3297).
 
 Packages for 2008.0 are provided for Corporate Desktop 2008.0
 customers.
 
 The updated packages have been patched to correct this issue.
 _______________________________________________________________________

 References:

 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3297
 _______________________________________________________________________

 Updated Packages:

 Mandriva Linux 2008.0:
 bd13d0ef9a8eb631bed95999fe7ce29d  2008.0/i586/ipxutils-2.2.6-3.1mdv2008.0.i586.rpm
 19ffdf6b5baa72a542a5a9b5faeac95d  2008.0/i586/libncpfs2.3-2.2.6-3.1mdv2008.0.i586.rpm
 714a70673cbafb24618464269cb94652  2008.0/i586/libncpfs2.3-devel-2.2.6-3.1mdv2008.0.i586.rpm
 1e7537c211b03059f561ed6acb73cc53  2008.0/i586/ncpfs-2.2.6-3.1mdv2008.0.i586.rpm 
 6007e8403e0c8f6959b3bdb0d67a52dd  2008.0/SRPMS/ncpfs-2.2.6-3.1mdv2008.0.src.rpm

 Mandriva Linux 2008.0/X86_64:
 4246619448c6eb958d3c600427c18d31  2008.0/x86_64/ipxutils-2.2.6-3.1mdv2008.0.x86_64.rpm
 c2d5d09735d2a65a3ebcad375fc596a8  2008.0/x86_64/lib64ncpfs2.3-2.2.6-3.1mdv2008.0.x86_64.rpm
 3eb7584709306995334f1400944ab37f  2008.0/x86_64/lib64ncpfs2.3-devel-2.2.6-3.1mdv2008.0.x86_64.rpm
 cd5a93f58dab12a821a32a5e0e7b44de  2008.0/x86_64/ncpfs-2.2.6-3.1mdv2008.0.x86_64.rpm 
 6007e8403e0c8f6959b3bdb0d67a52dd  2008.0/SRPMS/ncpfs-2.2.6-3.1mdv2008.0.src.rpm

 Mandriva Linux 2009.0:
 5194bdf36e6911aa51a1e32ead65bea2  2009.0/i586/ipxutils-2.2.6-6.1mdv2009.0.i586.rpm
 6e4b2bd69a8e340da0d43bc5cc42c6e6  2009.0/i586/libncpfs2.3-2.2.6-6.1mdv2009.0.i586.rpm
 9c327c39f9d545ca3c173851a536517f  2009.0/i586/libncpfs-devel-2.2.6-6.1mdv2009.0.i586.rpm
 5b346a3351ace6fbae5c16c3652bf85a  2009.0/i586/ncpfs-2.2.6-6.1mdv2009.0.i586.rpm 
 77297646ddaf605e80f3c142a7d64ff9  2009.0/SRPMS/ncpfs-2.2.6-6.1mdv2009.0.src.rpm

 Mandriva Linux 2009.0/X86_64:
 b93bc582369a4c2c1b2cfc7997c669b0  2009.0/x86_64/ipxutils-2.2.6-6.1mdv2009.0.x86_64.rpm
 3818472d1b6b13f92b4442ebf66ff759  2009.0/x86_64/lib64ncpfs2.3-2.2.6-6.1mdv2009.0.x86_64.rpm
 b65f979659537eea71a0bf5aed8bb51e  2009.0/x86_64/lib64ncpfs-devel-2.2.6-6.1mdv2009.0.x86_64.rpm
 e5653f0217fd5f1eac98fa73e0461b69  2009.0/x86_64/ncpfs-2.2.6-6.1mdv2009.0.x86_64.rpm 
 77297646ddaf605e80f3c142a7d64ff9  2009.0/SRPMS/ncpfs-2.2.6-6.1mdv2009.0.src.rpm

 Mandriva Linux 2009.1:
 e8f56a6a880cdc15d458e6e8a20a52eb  2009.1/i586/ipxutils-2.2.6-7.1mdv2009.1.i586.rpm
 c07d1d8e5c5dd5209ee155cc8640e6b4  2009.1/i586/libncpfs2.3-2.2.6-7.1mdv2009.1.i586.rpm
 2a8c1675cd884a547ad2a0fc5341a4ad  2009.1/i586/libncpfs-devel-2.2.6-7.1mdv2009.1.i586.rpm
 e2e3cfbd6dca2bc0f8d2e47cbcf4776d  2009.1/i586/ncpfs-2.2.6-7.1mdv2009.1.i586.rpm 
 760c022204aa3844bca01a48e4611a56  2009.1/SRPMS/ncpfs-2.2.6-7.1mdv2009.1.src.rpm

 Mandriva Linux 2009.1/X86_64:
 3e55e05e18be76bf12b8ecc3b3da8179  2009.1/x86_64/ipxutils-2.2.6-7.1mdv2009.1.x86_64.rpm
 c8ff45436bf99a5843b34e09efb110da  2009.1/x86_64/lib64ncpfs2.3-2.2.6-7.1mdv2009.1.x86_64.rpm
 47553e4562b5e97514cfc004229ce478  2009.1/x86_64/lib64ncpfs-devel-2.2.6-7.1mdv2009.1.x86_64.rpm
 8e3da74c354192f6cd19289650127375  2009.1/x86_64/ncpfs-2.2.6-7.1mdv2009.1.x86_64.rpm 
 760c022204aa3844bca01a48e4611a56  2009.1/SRPMS/ncpfs-2.2.6-7.1mdv2009.1.src.rpm

 Mandriva Linux 2010.0:
 8045994efc194fab3ae8e5f370032295  2010.0/i586/ipxutils-2.2.6-7.1mdv2010.0.i586.rpm
 80a95d2ead994ea5ca6061f2fa928387  2010.0/i586/libncpfs2.3-2.2.6-7.1mdv2010.0.i586.rpm
 6dad82999e3fb3076a61bca8f0ba4b78  2010.0/i586/libncpfs-devel-2.2.6-7.1mdv2010.0.i586.rpm
 acc4178fb24d52d9a46a3689a7c89728  2010.0/i586/ncpfs-2.2.6-7.1mdv2010.0.i586.rpm 
 2902291f88fdafee74953764f9afec2d  2010.0/SRPMS/ncpfs-2.2.6-7.1mdv2010.0.src.rpm

 Mandriva Linux 2010.0/X86_64:
 2623a234081a5ec10538ec558d6ed244  2010.0/x86_64/ipxutils-2.2.6-7.1mdv2010.0.x86_64.rpm
 e3429417b662c779913a2f5765ebc8a1  2010.0/x86_64/lib64ncpfs2.3-2.2.6-7.1mdv2010.0.x86_64.rpm
 2bf1febb0dd03dd948a439ace7f6d55d  2010.0/x86_64/lib64ncpfs-devel-2.2.6-7.1mdv2010.0.x86_64.rpm
 731db0f031912da255cb11f8434d4211  2010.0/x86_64/ncpfs-2.2.6-7.1mdv2010.0.x86_64.rpm 
 2902291f88fdafee74953764f9afec2d  2010.0/SRPMS/ncpfs-2.2.6-7.1mdv2010.0.src.rpm

 Corporate 4.0:
 01ef41a498ae344662d3867f151b702c  corporate/4.0/i586/ipxutils-2.2.6-1.1.20060mlcs4.i586.rpm
 3bd95f150e9fe2146d2544a420b5e7be  corporate/4.0/i586/libncpfs2.3-2.2.6-1.1.20060mlcs4.i586.rpm
 47c3c47344f79acdba5cc70c7fe852db  corporate/4.0/i586/libncpfs2.3-devel-2.2.6-1.1.20060mlcs4.i586.rpm
 306f96b3cc985c4f4df1803861eb672a  corporate/4.0/i586/ncpfs-2.2.6-1.1.20060mlcs4.i586.rpm 
 8b52955c0e46311fe722d1f2f4ed53b6  corporate/4.0/SRPMS/ncpfs-2.2.6-1.1.20060mlcs4.src.rpm

 Corporate 4.0/X86_64:
 7ac3e80a0d63658b20de316b0ea5e2a8  corporate/4.0/x86_64/ipxutils-2.2.6-1.1.20060mlcs4.x86_64.rpm
 853743d1d83018a48402d9f9b75eaeec  corporate/4.0/x86_64/lib64ncpfs2.3-2.2.6-1.1.20060mlcs4.x86_64.rpm
 61ae87e4d1915383ae010779830d925d  corporate/4.0/x86_64/lib64ncpfs2.3-devel-2.2.6-1.1.20060mlcs4.x86_64.rpm
 98150603959f80d8490e7ec6603f1af2  corporate/4.0/x86_64/ncpfs-2.2.6-1.1.20060mlcs4.x86_64.rpm 
 8b52955c0e46311fe722d1f2f4ed53b6  corporate/4.0/SRPMS/ncpfs-2.2.6-1.1.20060mlcs4.src.rpm

 Mandriva Enterprise Server 5:
 c771cf95d72e094d973e779287c0a667  mes5/i586/ipxutils-2.2.6-6.1mdvmes5.i586.rpm
 e7f41aa4a0a1a403a129cbda865c5aaa  mes5/i586/libncpfs2.3-2.2.6-6.1mdvmes5.i586.rpm
 a0d5385b21647c93bc4d33176df6900a  mes5/i586/libncpfs-devel-2.2.6-6.1mdvmes5.i586.rpm
 d6afd05c0ea009a8f4dab8bd6ab1ad62  mes5/i586/ncpfs-2.2.6-6.1mdvmes5.i586.rpm 
 f0658c582b75e52910f0a7495dc74b63  mes5/SRPMS/ncpfs-2.2.6-6.1mdvmes5.src.rpm

 Mandriva Enterprise Server 5/X86_64:
 5985a3c79bce9be6f417e7d9444d76c5  mes5/x86_64/ipxutils-2.2.6-6.1mdvmes5.x86_64.rpm
 7ab42ff1233f921c5a103916e7a935c0  mes5/x86_64/lib64ncpfs2.3-2.2.6-6.1mdvmes5.x86_64.rpm
 90a089d664adc4c1bb809673c647ad3c  mes5/x86_64/lib64ncpfs-devel-2.2.6-6.1mdvmes5.x86_64.rpm
 0e565bd41ada6d02dc9f648ad9310420  mes5/x86_64/ncpfs-2.2.6-6.1mdvmes5.x86_64.rpm 
 f0658c582b75e52910f0a7495dc74b63  mes5/SRPMS/ncpfs-2.2.6-6.1mdvmes5.src.rpm

 Multi Network Firewall 2.0:
 4d694e66271273fce6efec1a5405407c  mnf/2.0/i586/ipxutils-2.2.6-0.2.M20mdk.i586.rpm
 6dc480f65fec20068d55ce4c27a389c1  mnf/2.0/i586/libncpfs2.3-2.2.6-0.2.M20mdk.i586.rpm
 9adff7bcce1140138e7cc11c3386c893  mnf/2.0/i586/libncpfs2.3-devel-2.2.6-0.2.M20mdk.i586.rpm
 e5bd02b2b8e551faa39ccfdb21ec2065  mnf/2.0/i586/ncpfs-2.2.6-0.2.M20mdk.i586.rpm 
 2f6be25e1b19df9c30f69b2efb96bebc  mnf/2.0/SRPMS/ncpfs-2.2.6-0.2.M20mdk.src.rpm
 _______________________________________________________________________

 To upgrade automatically use MandrivaUpdate or urpmi.  The verification
 of md5 checksums and GPG signatures is performed automatically for you.

 All packages are signed by Mandriva for security.  You can obtain the
 GPG public key of the Mandriva Security Team by executing:

  gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

 You can view other update advisories for Mandriva Linux at:

  http://www.mandriva.com/security/advisories

 If you want to report vulnerabilities, please contact

  security_(at)_mandriva.com
 _______________________________________________________________________

 Type Bits/KeyID     Date       User ID
 pub  1024D/22458A98 2000-07-10 Mandriva Security Team
  <security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iD8DBQFLhAN2mqjQ0CJFipgRApdWAJ9jUZjWv99/Qif8Z7JK1TyXwUJeNgCgtOVK
9mbsAaAkkLmbI09GfJ72TGc=
=SbNo
-----END PGP SIGNATURE-----