CVE-2004-1079: Buffer overflow in (1) ncplogin and (2) ncpmap in nwclient.c for ncpfs 2.2.4, and possibly other versions,...

Security readout for executives and security teams

CVE-2004-1079 is an old local privilege-escalation issue in ncpfs client tools. A user who already has access to a system may be able to abuse overly long input to the -T option in ncplogin or ncpmap and gain elevated privileges. Exposure is most likely on legacy Linux systems where ncpfs is installed and ncplogin or ncpmap are available to local users, especially shared or multi-user hosts. The supplied data does not identify modern affected distributions or default install status. Handle as a legacy exposure cleanup item unless affected tools exist on shared or sensitive hosts. If present there, prioritize remediation because the impact may be privilege gain from an existing local account. Mitigation focus: Inventory systems for installed ncpfs packages and ncplogin or ncpmap binaries.; Check Fedora, Mandriva, Gentoo, or current distribution advisories for fixed packages.; Remove ncpfs where NetWare client functionality is no longer required..

Prepared

Jun 30, 2026, 02:08 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.