Certain legacy functionality in fusermount in fuse 2.8.5 and earlier, when util-linux does not support the --no-canonicalize option, allows local users to bypass intended access restrictions and unmount arbitrary directories via a symlink attack.
http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html
http://www.openwall.com/lists/oss-security/2011/02/02/2
OR
cpe:2.3:a:fuse:fuse:1.9:*:*:*:*:*:*:*
cpe:2.3:a:fuse:fuse:2.0:pre0:*:*:*:*:*:*
cpe:2.3:a:fuse:fuse:2.0:pre1:*:*:*:*:*:*
cpe:2.3:a:fuse:fuse:2.1:*:*:*:*:*:*:*
cpe:2.3:a:fuse:fuse:2.2:*:*:*:*:*:*:*
cpe:2.3:a:fuse:fuse:2.2.1:*:*:*:*:*:*:*
cpe:2.3:a:fuse:fuse:2.3:pre:*:*:*:*:*:*
cpe:2.3:a:fuse:fuse:2.3:rc1:*:*:*:*:*:*
cpe:2.3:a:fuse:fuse:2.3.0:*:*:*:*:*:*:*
cpe:2.3:a:fuse:fuse:2.4.0:*:*:*:*:*:*:*
cpe:2.3:a:fuse:fuse:2.4.1:*:*:*:*:*:*:*
cpe:2.3:a:fuse:fuse:2.4.2:*:*:*:*:*:*:*
cpe:2.3:a:fuse:fuse:2.5.0:*:*:*:*:*:*:*
cpe:2.3:a:fuse:fuse:2.5.1:*:*:*:*:*:*:*
cpe:2.3:a:fuse:fuse:2.5.2:*:*:*:*:*:*:*
cpe:2.3:a:fuse:fuse:2.5.3:*:*:*:*:*:*:*
cpe:2.3:a:fuse:fuse:2.6.0:*:*:*:*:*:*:*
cpe:2.3:a:fuse:fuse:2.6.1:*:*:*:*:*:*:*
cpe:2.3:a:fuse:fuse:2.6.3:*:*:*:*:*:*:*
cpe:2.3:a:fuse:fuse:2.6.5:*:*:*:*:*:*:*
cpe:2.3:a:fuse:fuse:2.7.0:*:*:*:*:*:*:*
cpe:2.3:a:fuse:fuse:2.7.1:*:*:*:*:*:*:*
cpe:2.3:a:fuse:fuse:2.7.2:*:*:*:*:*:*:*
cpe:2.3:a:fuse:fuse:2.7.3:*:*:*:*:*:*:*
cpe:2.3:a:fuse:fuse:2.7.4:*:*:*:*:*:*:*
cpe:2.3:a:fuse:fuse:2.7.5:*:*:*:*:*:*:*
cpe:2.3:a:fuse:fuse:2.7.6:*:*:*:*:*:*:*
cpe:2.3:a:fuse:fuse:2.8.0:*:*:*:*:*:*:*
cpe:2.3:a:fuse:fuse:2.8.1:*:*:*:*:*:*:*
cpe:2.3:a:fuse:fuse:2.8.2:*:*:*:*:*:*:*
cpe:2.3:a:fuse:fuse:2.8.3:*:*:*:*:*:*:*
cpe:2.3:a:fuse:fuse:2.8.4:*:*:*:*:*:*:*
cpe:2.3:a:fuse:fuse:*:*:*:*:*:*:*:* versions up to 2.8.5 (inclusive)
ID | Name | Product | Family | Severity |
---|---|---|---|---|
75508 | openSUSE Security Update : fuse (openSUSE-SU-2011:0264-1) | Nessus | SuSE Local Security Checks | medium |
68309 | Oracle Linux 6 : fuse (ELSA-2011-1083) | Nessus | Oracle Linux Local Security Checks | medium |
57257 | SuSE 10 Security Update : fuse (ZYPP Patch Number 7418) | Nessus | SuSE Local Security Checks | medium |
55635 | RHEL 6 : fuse (RHSA-2011:1083) | Nessus | Red Hat Local Security Checks | medium |
53724 | openSUSE Security Update : fuse (openSUSE-SU-2011:0265-1) | Nessus | SuSE Local Security Checks | medium |
53256 | SuSE 10 Security Update : FUSE (ZYPP Patch Number 7362) | Nessus | SuSE Local Security Checks | medium |
53231 | SuSE 11.1 Security Update : FUSE (SAT Patch Number 4095) | Nessus | SuSE Local Security Checks | medium |
52479 | Ubuntu 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : fuse vulnerabilities (USN-1077-1) | Nessus | Ubuntu Local Security Checks | low |