2371 matches found
CVE-2006-0751: Undefined Security Weakness
Multiple unspecified vulnerabilities in the 1 Filesystem in USErspace FUSE client and 2 NOOFS daemon in in Network Object Oriented File System NOOFS before 0.9.0 have unspecified impact and attack vectors...
DTSA-27-1 fuse - potential data corruption when installed seduid root
Bulletin has no description...
Mandrake Linux Security Advisory : fuse (MDKSA-2005:216)
Thomas Beige found that fusermount failed to securely handle special characters specified in mount points, which could allow a local attacker to corrupt the contents of /etc/mtab by mounting over a maliciously-named directory using fusermount. This could potentially allow the attacker to set...
GLSA-200511-17 : FUSE: mtab corruption through fusermount
The remote host is affected by the vulnerability described in GLSA-200511-17 FUSE: mtab corruption through fusermount Thomas Biege discovered that fusermount fails to securely handle special characters specified in mount points. Impact : A local attacker could corrupt the contents of the /etc/mta...
CVE-2005-3531
fusermount in FUSE before 2.4.1, if installed setuid root, allows local users to corrupt /etc/mtab and possibly modify mount options by performing a mount over a directory whose name contains certain special characters...
CVE-2005-3531
fusermount in FUSE before 2.4.1, if installed setuid root, allows local users to corrupt /etc/mtab and possibly modify mount options by performing a mount over a directory whose name contains certain special characters...
CVE-2005-3531
fusermount in FUSE before 2.4.1, if installed setuid root, allows local users to corrupt /etc/mtab and possibly modify mount options by performing a mount over a directory whose name contains certain special characters...
[ GLSA 200511-17 ] FUSE: mtab corruption through fusermount
Gentoo Linux Security Advisory GLSA 200511-17 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
CVE-2005-3531
CVE-2005-3531 affects fusermount in the FUSE project (before version 2.4.1). The issue arises when fusermount is installed setuid root and a mount is performed over a directory whose name contains certain special characters, allowing local users to corrupt /etc/mtab and potentially modify mount o...
CVE-2005-3531: Undefined Security Weakness
fusermount in FUSE before 2.4.1, if installed setuid root, allows local users to corrupt /etc/mtab and possibly modify mount options by performing a mount over a directory whose name contains certain special characters...
CVE-2005-3531
fusermount in FUSE before 2.4.1, if installed setuid root, allows local users to corrupt /etc/mtab and possibly modify mount options by performing a mount over a directory whose name contains certain special characters...
FUSE: mtab corruption through fusermount
Background FUSE Filesystem in Userspace allows implementation of a fully functional filesystem in a userspace program. The fusermount utility is used to mount/unmount FUSE file systems. Description Thomas Biege discovered that fusermount fails to securely handle special characters specified in...
DSA-744-1 fuse - programming error
Bulletin has no description...
Debian DSA-744-1 : fuse - programming error
Sven Tantau discovered a security problem in fuse, a filesystem in userspace, that can be exploited by malicious, local users to disclose potentially sensitive information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...
CVE-2005-1858
CVE-2005-1858 affects FUSE: memory from previously used pages is not cleared when a read returns fewer bytes than requested in FUSE 2.x before 2.3.0, enabling local information disclosure. Connected sources show Debian advisories (DSA-744-1) stating a fix in fuse 2.3.0-1 and later; upgrade to 2.3...
CVE-2005-1858
FUSE 2.x before 2.3.0 does not properly clear previously used memory from unfilled pages when the filesystem returns a short byte count to a read request, which may allow local users to obtain sensitive information...
CVE-2005-1858
FUSE 2.x before 2.3.0 does not properly clear previously used memory from unfilled pages when the filesystem returns a short byte count to a read request, which may allow local users to obtain sensitive information...
FUSE 2.22.3 - Local Information Disclosure
FUSE 2.22.3 - Local Information Disclosure // source: https://www.securityfocus.com/bid/13857/info FUSE is susceptible to a local information disclosure vulnerability. This issue is due to a failure of the kernel module to properly clear used memory prior to its reuse. This vulnerability allows...
FUSE Linux userland filesystem interface information leak
Memory page is not zeroed, it leads to information leak from kernel space...
[Full-disclosure] Advisory: FUSE: Filesystem in Userspace - Information Disclosure (version mixup update)
Advisory: FUSE: Filesystem in Userspace - Information Disclosure Update: Correction of affected versions and os. Product: FUSE: Filesystem in Userspace Affected Version: 2.2, 2.2.1, 2.3-pre and 2.3-rc1 Immune Version: 2.2, 2.3.0 OS affected: Linux 2.4., 2.6. Security-Risk: high Remote-Exploit: no...