openSUSE Security Update : fuse (openSUSE-2015-401)

Update to version 2.9.4 - fix exec environment for mount and umount bsc931452, CVE-2015-3202 - properly restore the default signal handler - fix directory file handle passed toioctl method. - fix for uids/gids larger than 2147483647 - initialize stat buffer passed to getattr and fgetattr...

openSUSE Security Update : fuse (openSUSE-2015-394)

Update to version 2.9.4 - fix exec environment for mount and umount bsc931452, CVE-2015-3202 - properly restore the default signal handler - fix directory file handle passed toioctl method. - fix for uids/gids larger than 2147483647 - initialize stat buffer passed to getattr and fgetattr...

MGASA-2015-0239 Updated fuse packages fix CVE-2015-3202

Updated fuse packages fix security vulnerability: Tavis Ormandy discovered that FUSE incorrectly filtered environment variables. A local attacker could use this issue to gain administrative privileges CVE-2015-3202...

Updated fuse packages fix CVE-2015-3202

Updated fuse packages fix security vulnerability: Tavis Ormandy discovered that FUSE incorrectly filtered environment variables. A local attacker could use this issue to gain administrative privileges CVE-2015-3202...

Debian DLA-226-2 : ntfs-3g regression update

The patch applied for ntfs-3g to fix CVE-2015-3202 in DLA 226-1 was incomplete. This update corrects that problem. For reference the original advisory text follows. Tavis Ormandy discovered that NTFS-3G, a read-write NTFS driver for FUSE, does not scrub the environment before executing mount or...

[SECURITY] [DLA 226-2] ntfs-3g regression update

Package : ntfs-3g Version : 1:2010.3.6-1+deb6u2 CVE ID : CVE-2015-3202 The patch applied for ntfs-3g to fix CVE-2015-3202 in DLA 226-1 was incomplete. This update corrects that problem. For reference the original advisory text follows. Tavis Ormandy discovered that NTFS-3G, a read-write NTFS driv...

[SECURITY] [DSA 3268-2] ntfs-3g security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3268-2 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 26, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3268-2] ntfs-3g security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3268-2 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 26, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DLA 226-1] ntfs-3g security update

Package : ntfs-3g Version : 1:2010.3.6-1+deb6u1 CVE ID : CVE-2015-3202 Tavis Ormandy discovered that NTFS-3G, a read-write NTFS driver for FUSE, does not scrub the environment before executing mount or umount with elevated privileges. A local user can take advantage of this flaw to overwrite...

[SECURITY] [DSA 3268-1] ntfs-3g security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3268-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 22, 2015 http://www.debian.org/security/faq -...

Fuse - Local Privilege Escalation Vulnerability

Exploit for linux platform in category local exploits Making a demo exploit for CVE-2015-3202 on Ubuntu fit in a tweet. 12345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890 a=/tmp/.$$;b=chmod\ u+sx;echo $b...

Fuse Local Privilege Escalation

Making a demo exploit for CVE-2015-3202 on Ubuntu fit in a tweet. 12345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890 a=/tmp/.$$;b=chmod\ u+sx;echo $b /bin/sh$a;$b $a;a+=;$a;mkdir -p...

Fuse 2.9.3-15 - Local Privilege Escalation

Fuse 2.9.3-15 - Local Privilege Escalation Source: https://gist.github.com/taviso/ecb70eb12d461dd85cba Tweet: https://twitter.com/taviso/status/601370527437967360 Recommend Reading: http://seclists.org/oss-sec/2015/q2/520 YouTube: https://www.youtube.com/watch?v=V0i3uJJPJ88 Making a demo exploit...

CVE-2015-3202

creationtimestamp| type| source ---|---|--- 2015-05-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37089...

[SECURITY] [DSA 3268-1] ntfs-3g security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3268-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 22, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3268-1] ntfs-3g security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3268-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 22, 2015 http://www.debian.org/security/faq -...

[SECURITY] [DSA 3266-1] fuse security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3266-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 21, 2015 http://www.debian.org/security/faq -...

SUSE-SU-2015:1024-1 Security update for FUSE

This update for FUSE fixes the following security issue: CVE-2015-3202: FUSE did not clear the environment upon execution of external programs. Security Issues: CVE-2015-3202...

SUSE-SU-2015:1053-1 Security update for fuse

This update fixes a vulnerability in fuse that did not clear the environment upon execution of external programs. CVE-2015-3202 has been assigned to this issue...

Debian DSA-3202-1 : mono - security update

Researchers at INRIA and Xamarin discovered several vulnerabilities in mono, a platform for running and developing applications based on the ECMA/ISO Standards. Mono's TLS stack contained several problems that hampered its capabilities: those issues could lead to client impersonation via SKIP-TLS...