CVE-2010-3879 FUSE, possibly 2.8.5 and earlier, allows local users to create mtab entries with arbitrary pathnames, and consequently unmount any filesystem, via a symlink attack on the parent directory of the mount...
MediumCVSS 5.8
EPSS 9.8%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
FUSE, possibly 2.8.5 and earlier, allows local users to create mtab entries with arbitrary pathnames, and consequently unmount any filesystem, via a symlink attack on the parent directory of the mountpoint of a FUSE filesystem, a different vulnerability than CVE-2010-0789.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| libfuse project libfuse | <= 2.8.5 | No fix listed |
| debian/fuse(Debian:12) | < 2.8.5-1 | 2.8.5-1 |
| debian/fuse(Debian:13) | < 2.8.5-1 | 2.8.5-1 |
References
- Debian Security Tracker CVE-2010-3879 vendor-advisory
- bugs.debian.org issue-tracking
- bugs.debian.org exploit patch third-party-advisory
- FEDORA-2011-0854 third-party-advisory vendor-advisory
- 20101102 fusermount: Unmount any filesystem exploit mailing-list third-party-advisory
- SUSE-SR:2011:005 third-party-advisory vendor-advisory
- [oss-security] 20101104 CVE request: fuse exploit mailing-list third-party-advisory
- [oss-security] 20101105 Re: CVE request: fuse exploit mailing-list third-party-advisory
- 70520 broken-link vdb-entry
- 42961 third-party-advisory
- 42965 third-party-advisory
- www.halfdog.net exploit patch third-party-advisory
- MDVSA-2013:155 third-party-advisory vendor-advisory
- 44623 exploit third-party-advisory vdb-entry
- USN-1045-1 third-party-advisory vendor-advisory
- USN-1045-2 third-party-advisory vendor-advisory
- ADV-2011-0181 permissions-required vdb-entry
- ADV-2011-0302 permissions-required vdb-entry
- bugs.launchpad.net exploit third-party-advisory
- bugzilla.novell.com exploit issue-tracking
- bugzilla.redhat.com exploit issue-tracking patch
- fuse-fusermount-tool-dos(62986) third-party-advisory vdb-entry