Published: 02/09/2011 Updated: 13/02/2023

CVSS v2 Base Score: 3.3 | Impact Score: 4.9 | Exploitability Score: 3.4

VMScore: 294

Vector: AV:L/AC:M/Au:N/C:N/I:P/A:P

fusermount in fuse 2.8.5 and previous versions does not perform a chdir to / before performing a mount or umount, which allows local users to unmount arbitrary directories via unspecified vectors.

Vulnerable Product	Search on Vulmon	Subscribe to Product
fuse fuse 2.4.2
fuse fuse 2.6.0
fuse fuse 2.4.1
fuse fuse 2.2
fuse fuse 2.6.5
fuse fuse 2.7.0
fuse fuse 2.7.4
fuse fuse 2.3.0
fuse fuse 2.4.0
fuse fuse 2.6.3
fuse fuse 2.5.3
fuse fuse 2.3
fuse fuse 2.0
fuse fuse 2.8.1
fuse fuse 2.2.1
fuse fuse 2.5.1
fuse fuse 2.7.1
fuse fuse 2.8.2
fuse fuse 2.7.2
fuse fuse 2.1
fuse fuse 2.8.0
fuse fuse 2.5.2
fuse fuse
fuse fuse 1.9
fuse fuse 2.7.5
fuse fuse 2.7.6
fuse fuse 2.5.0
fuse fuse 2.6.1
fuse fuse 2.8.4
fuse fuse 2.8.3
fuse fuse 2.7.3

Debian Bug report logs - #624551 Three more security issues: CVE-2011-0541, CVE-2011-0542, CVE-2011-0543 Package: fuse; Maintainer for fuse is Laszlo Boszormenyi (GCS) <gcs@debianorg>; Source for fuse is src:fuse (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <muehlenhoff@univentionde> Date: Fri, 29 Apr 2011 ...

It was discovered that FUSE would incorrectly follow symlinks when checking mountpoints under certain conditions A local attacker, with access to use FUSE, could unmount arbitrary locations, leading to a denial of service ...

CWE-264 http://www.openwall.com/lists/oss-security/2011/02/03/5 http://www.openwall.com/lists/oss-security/2011/02/08/4 http://www.openwall.com/lists/oss-security/2011/02/02/2 http://fuse.git.sourceforge.net/git/gitweb.cgi?p=fuse/fuse%3Ba=commit%3Bh=1e7607ff89c65b005f69e27aeb1649d624099873 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=624551 https://usn.ubuntu.com/1077-1/https://nvd.nist.gov

CVE-2011-0542

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect