CVE-2008-2232

CVE-2008-2232 affects the afuse user-space FUSE automount tool where the expand_template function in afuse.c mishandles a pathname, enabling local privilege elevation. Publicly disclosed fixes target afuse 0.2-4 for Fedora (Fedora 10 via FEDORA-2009-8792 and Fedora 11 via FEDORA-2009-8816) and De...

Afuse 'afuse.c' SHELL命令注入漏洞

BUGTRAQ ID: 30245 CVE ID：CVE-2008-2232 CNCVE ID：CNCVE-20082232 Afuse是一款类似autofs工具的文件系统自动挂接程序。 Afuse不正确处理命令行参数，本地攻击者可以利用漏洞以高特权执行任意命令。 afuse接收如下形式的命令行： afuse /path -o mounttemplate="mount-script %m %r" \ unmounttemplate="unmount-script %m %r"...

Debian DSA-1611-1 : afuse - privilege escalation

Anders Kaseorg discovered that afuse, an automounting file system in user-space, did not properly escape meta characters in paths. This allowed a local attacker with read access to the filesystem to execute commands as the owner of the filesystem. %NASLMINLEVEL 70300 C Tenable Network Security,...

[SECURITY] [DSA 1611-1] New afuse packages fix privilege escalation

------------------------------------------------------------------------ Debian Security Advisory DSA-1611-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst July 16, 2008 http://www.debian.org/security/faq -...

DSA-1611-1 afuse - privilege escalation

Bulletin has no description...