Lucene search

[email protected]NVD:CVE-2011-0543

HistorySep 02, 2011 - 11:55 p.m.

CVE-2011-0543

2011-09-0223:55:02

CWE-264

[email protected]

web.nvd.nist.gov

CVSS2

3.3

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:P/A:P

AI Score

6.1

Confidence

Low

EPSS

Percentile

5.1%

JSON

Certain legacy functionality in fusermount in fuse 2.8.5 and earlier, when util-linux does not support the --no-canonicalize option, allows local users to bypass intended access restrictions and unmount arbitrary directories via a symlink attack.

Affected configurations

Nvd

Node

fusefuseRange≤2.8.5

fusefuseMatch1.9

fusefuseMatch2.0pre0

fusefuseMatch2.0pre1

fusefuseMatch2.1

fusefuseMatch2.2

fusefuseMatch2.2.1

fusefuseMatch2.3pre

fusefuseMatch2.3rc1

fusefuseMatch2.3.0

fusefuseMatch2.4.0

fusefuseMatch2.4.1

fusefuseMatch2.4.2

fusefuseMatch2.5.0

fusefuseMatch2.5.1

fusefuseMatch2.5.2

fusefuseMatch2.5.3

fusefuseMatch2.6.0

fusefuseMatch2.6.1

fusefuseMatch2.6.3

fusefuseMatch2.6.5

fusefuseMatch2.7.0

fusefuseMatch2.7.1

fusefuseMatch2.7.2

fusefuseMatch2.7.3

fusefuseMatch2.7.4

fusefuseMatch2.7.5

fusefuseMatch2.7.6

fusefuseMatch2.8.0

fusefuseMatch2.8.1

fusefuseMatch2.8.2

fusefuseMatch2.8.3

fusefuseMatch2.8.4

VendorProductVersionCPE
fusefuse*cpe:2.3:a:fuse:fuse:*:*:*:*:*:*:*:*
fusefuse1.9cpe:2.3:a:fuse:fuse:1.9:*:*:*:*:*:*:*
fusefuse2.0cpe:2.3:a:fuse:fuse:2.0:pre0:*:*:*:*:*:*
fusefuse2.0cpe:2.3:a:fuse:fuse:2.0:pre1:*:*:*:*:*:*
fusefuse2.1cpe:2.3:a:fuse:fuse:2.1:*:*:*:*:*:*:*
fusefuse2.2cpe:2.3:a:fuse:fuse:2.2:*:*:*:*:*:*:*
fusefuse2.2.1cpe:2.3:a:fuse:fuse:2.2.1:*:*:*:*:*:*:*
fusefuse2.3cpe:2.3:a:fuse:fuse:2.3:pre:*:*:*:*:*:*
fusefuse2.3cpe:2.3:a:fuse:fuse:2.3:rc1:*:*:*:*:*:*
fusefuse2.3.0cpe:2.3:a:fuse:fuse:2.3.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
fuse	fuse	*	cpe:2.3:a:fuse:fuse::::::::
fuse	fuse	1.9	cpe:2.3:a:fuse:fuse:1.9:::::::*
fuse	fuse	2.0	cpe:2.3:a:fuse:fuse:2.0:pre0::::::
fuse	fuse	2.0	cpe:2.3:a:fuse:fuse:2.0:pre1::::::
fuse	fuse	2.1	cpe:2.3:a:fuse:fuse:2.1:::::::*
fuse	fuse	2.2	cpe:2.3:a:fuse:fuse:2.2:::::::*
fuse	fuse	2.2.1	cpe:2.3:a:fuse:fuse:2.2.1:::::::*
fuse	fuse	2.3	cpe:2.3:a:fuse:fuse:2.3:pre::::::
fuse	fuse	2.3	cpe:2.3:a:fuse:fuse:2.3:rc1::::::
fuse	fuse	2.3.0	cpe:2.3:a:fuse:fuse:2.3.0:::::::*