CVE-2005-0013: nwclient.c in ncpfs before 2.2.6 does not drop root privileges before executing utilities using the NetWare...

Security readout for executives and security teams

CVE-2005-0013 is a local privilege escalation issue in ncpfs before 2.2.6. A user who already has local access to an affected system could gain higher privileges because nwclient.c did not drop root privileges before running NetWare client utilities. Exposure is most likely on legacy Linux systems with ncpfs or NetWare client utilities installed, especially multi-user hosts. Internet-facing exposure is not indicated by the bundle; the described attacker position is local user access. Prioritize remediation on any remaining legacy systems with local users. The business risk is privilege escalation after initial access, not direct remote compromise, but root-level escalation can materially worsen an intrusion. Mitigation focus: Upgrade ncpfs to 2.2.6 or a distribution-fixed package.; Remove ncpfs or NetWare client tools where no longer required.; Restrict local user access on systems requiring legacy NetWare client functionality..

Prepared

Jun 30, 2026, 01:23 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.