nwclient.c in ncpfs before 2.2.6 does not drop root privileges before executing utilities using the NetWare client functions, which allows local users to gain privileges.
| Software | From | Fixed in |
|---|---|---|
| ncpfs / ncpfs | 2.2.2 | 2.2.2.x |
| ncpfs / ncpfs | 2.2.4 | 2.2.4.x |
| ncpfs / ncpfs | 2.2.5 | 2.2.5.x |
| ncpfs / ncpfs | 2.2.1 | 2.2.1.x |
| ncpfs / ncpfs | 2.2.3 | 2.2.3.x |