Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5.8
CVSSv2

CVE-2010-3879

Published: 22/01/2011 Updated: 10/11/2020
CVSS v2 Base Score: 5.8 | Impact Score: 4.9 | Exploitability Score: 8.6
VMScore: 585
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:P
Subscribe to Libfuse Project

Vulnerability Summary

FUSE, possibly 2.8.5 and previous versions, allows local users to create mtab entries with arbitrary pathnames, and consequently unmount any filesystem, via a symlink attack on the parent directory of the mountpoint of a FUSE filesystem, a different vulnerability than CVE-2010-0789.

Vulnerable Product Search on Vulmon Subscribe to Product

libfuse project libfuse

Vendor Advisories

Debian CVElist Bug Report Logs: /usr/bin/fusermount: fusermount allows unmount any filesystem
Debian Bug report logs - #602333 /usr/bin/fusermount: fusermount allows unmount any filesystem Package: fuse-utils; Maintainer for fuse-utils is (unknown); Reported by: Paul Szabo <paulszabo@sydneyeduau> Date: Wed, 3 Nov 2010 20:27:01 UTC Severity: grave Tags: security, squeeze-ignore Found in versions fuse/284-11, ...
Ubuntu Security Notice: fuse vulnerability
It was discovered that FUSE could be tricked into incorrectly updating the mtab file when mounting filesystems A local attacker, with access to use FUSE, could unmount arbitrary locations, leading to a denial of service ...
Ubuntu Security Notice: util-linux update
USN-1045-1 fixed vulnerabilities in FUSE This update to util-linux adds support for new options required by the FUSE update ...

Exploits

Exploit DB: FUSE fusermount Tool - Race Condition
source: wwwsecurityfocuscom/bid/44623/info wwwhalfdognet/Security/FuseTimerace/ FUSE fusermount tool is prone to a race-condition vulnerability A local attacker can exploit this issue to cause a denial of service by unmounting any filesystem of the system githubcom/offensive-security/exploitdb-bin-splo ...

References

CWE-59http://openwall.com/lists/oss-security/2010/11/05/2https://bugzilla.redhat.com/show_bug.cgi?id=651183http://www.halfdog.net/Security/FuseTimerace/http://lists.grok.org.uk/pipermail/full-disclosure/2010-November/077247.htmlhttps://bugzilla.novell.com/show_bug.cgi?id=651598http://www.ubuntu.com/usn/USN-1045-2https://bugs.launchpad.net/bugs/670622http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=602333http://www.ubuntu.com/usn/USN-1045-1http://www.securityfocus.com/bid/44623http://openwall.com/lists/oss-security/2010/11/04/8http://secunia.com/advisories/42965http://osvdb.org/70520http://www.vupen.com/english/advisories/2011/0181http://www.vupen.com/english/advisories/2011/0302http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053792.htmlhttp://secunia.com/advisories/42961http://www.mandriva.com/security/advisories?name=MDVSA-2013:155http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/62986https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=602333https://nvd.nist.govhttps://usn.ubuntu.com/1045-1/https://www.exploit-db.com/exploits/34953/
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
deserializationCVE-2024-4040cross-site scriptingCVE-2023-25790CVE-2024-2961XML external entityCVE-2024-26926CVE-2024-32806CVE-2024-32711
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook