CVE-2004-0010

Name	CVE-2004-0010
Description	Stack-based buffer overflow in the ncp_lookup function for ncpfs in Linux kernel 2.4.x allows local users to gain privileges.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DSA-479, DSA-480, DSA-481, DSA-482, DSA-489, DSA-491, DSA-495

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Origin
kernel-image-2.4.16-lart	source	woody	20040419	DSA-495
kernel-image-2.4.16-netwinder	source	woody	20040419	DSA-495
kernel-image-2.4.16-riscpc	source	woody	20040419	DSA-495
kernel-image-2.4.17-hppa	source	woody	32.4	DSA-480
kernel-image-2.4.17-ia64	source	woody	011226.17	DSA-481
kernel-image-2.4.17-s390	source	woody	2.4.17-2.woody.4	DSA-482
kernel-image-2.4.18-1-alpha	source	woody	2.4.18-15	DSA-479
kernel-image-2.4.18-1-i386	source	woody	2.4.18-13	DSA-479
kernel-image-2.4.18-hppa	source	woody	62.3	DSA-480
kernel-image-2.4.18-i386bf	source	woody	2.4.18-5woody8	DSA-479
kernel-patch-2.4.16-arm	source	woody	20040419	DSA-495
kernel-patch-2.4.17-apus	source	woody	2.4.17-5	DSA-482
kernel-patch-2.4.17-mips	source	woody	2.4.17-0.020226.2.woody6	DSA-489
kernel-patch-2.4.17-mipsel	source	woody	2.4.17-0.020226.2.woody6	DSA-489
kernel-patch-2.4.17-s390	source	woody	2.4.17-2.woody.4	DSA-482
kernel-patch-2.4.18-powerpc	source	woody	2.4.18-1woody5	DSA-479
kernel-patch-2.4.19-mips	source	woody	2.4.19-0.020911.1.woody4	DSA-491
kernel-source-2.4.16	source	woody	2.4.16-1woody2	DSA-495
kernel-source-2.4.17	source	woody	2.4.17-1woody3	DSA-489
kernel-source-2.4.18	source	woody	2.4.18-14.3	DSA-479
kernel-source-2.4.19	source	woody	2.4.19-4.woody2	DSA-491
kernel-source-2.4.27	source	(unstable)	(not affected)

Notes

- kernel-source-2.4.27 <not-affected> (Fixed before upload into archive; 2.4.25-pre7)