CAN-2005-1858

This CVE affects FUSE (filesystem in userspace): FUSE 2.x before 2.3.0 fails to clear memory from unfilled pages after a read returns a short byte count, potentially allowing local users to disclose sensitive information. The Debian advisory (DSA-744-1) links CVE-2005-1858 to fuse and notes a fix...

Debian Security Advisory DSA 744-1 (fuse)

The remote host is missing an update to fuse announced via advisory DSA 744-1. Sven Tantau discovered a security problem in fuse, a filesystem in userspace, that can be exploited by malicious, local users to disclose potentially sensitive information. The old stable distribution woody does not...

CVE-2005-1858

CVE-2005-1858 affects FUSE: memory from previously used pages is not cleared when a read returns fewer bytes than requested in FUSE 2.x before 2.3.0, enabling local information disclosure. Connected sources show Debian advisories (DSA-744-1) stating a fix in fuse 2.3.0-1 and later; upgrade to 2.3...