DEBIAN-CVE-2007-5159

The ntfs-3g package before 1.913-2.fc7 in Fedora 7, and an ntfs-3g package in Ubuntu 7.10/Gutsy, assign incorrect permissions setuid root to mount.ntfs-3g, which allows local users with fuse group membership to read from and write to arbitrary block devices, possibly involving a file descriptor...

[SECURITY] Fedora 7 Update: fuse-2.7.0-5.fc7

With FUSE it is possible to implement a fully functional filesystem in a userspace program. This package contains the FUSE userspace tools to mount a FUSE filesystem. Note: For security reasons only members of the group "fuse" are allowed to umount fuse filesystems. You can find more details on...

Design/Logic Flaw

Multiple unspecified vulnerabilities in the 1 Filesystem in USErspace FUSE client and 2 NOOFS daemon in in Network Object Oriented File System NOOFS before 0.9.0 have unspecified impact and attack vectors...

CVE-2006-0751

Multiple unspecified vulnerabilities in the 1 Filesystem in USErspace FUSE client and 2 NOOFS daemon in in Network Object Oriented File System NOOFS before 0.9.0 have unspecified impact and attack vectors...

CVE-2006-0751

Technical details about CVE-2006-0751 are not provided in the supplied documents; no products, versions, impact, exploit info, or remediation are specified. Monitor for updates.

DTSA-27-1 fuse - potential data corruption when installed seduid root

Bulletin has no description...

Mandrake Linux Security Advisory : fuse (MDKSA-2005:216)

Thomas Beige found that fusermount failed to securely handle special characters specified in mount points, which could allow a local attacker to corrupt the contents of /etc/mtab by mounting over a maliciously-named directory using fusermount. This could potentially allow the attacker to set...

GLSA-200511-17 : FUSE: mtab corruption through fusermount

The remote host is affected by the vulnerability described in GLSA-200511-17 FUSE: mtab corruption through fusermount Thomas Biege discovered that fusermount fails to securely handle special characters specified in mount points. Impact : A local attacker could corrupt the contents of the /etc/mta...

CVE-2005-3531

fusermount in FUSE before 2.4.1, if installed setuid root, allows local users to corrupt /etc/mtab and possibly modify mount options by performing a mount over a directory whose name contains certain special characters...

CVE-2005-3531

fusermount in FUSE before 2.4.1, if installed setuid root, allows local users to corrupt /etc/mtab and possibly modify mount options by performing a mount over a directory whose name contains certain special characters...

CVE-2005-3531

fusermount in FUSE before 2.4.1, if installed setuid root, allows local users to corrupt /etc/mtab and possibly modify mount options by performing a mount over a directory whose name contains certain special characters...

CVE-2005-3531

fusermount in FUSE before 2.4.1, if installed setuid root, allows local users to corrupt /etc/mtab and possibly modify mount options by performing a mount over a directory whose name contains certain special characters...

CVE-2005-3531

CVE-2005-3531 affects fusermount in the FUSE project (before version 2.4.1). The issue arises when fusermount is installed setuid root and a mount is performed over a directory whose name contains certain special characters, allowing local users to corrupt /etc/mtab and potentially modify mount o...

[ GLSA 200511-17 ] FUSE: mtab corruption through fusermount

Gentoo Linux Security Advisory GLSA 200511-17 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

FUSE: mtab corruption through fusermount

Background FUSE Filesystem in Userspace allows implementation of a fully functional filesystem in a userspace program. The fusermount utility is used to mount/unmount FUSE file systems. Description Thomas Biege discovered that fusermount fails to securely handle special characters specified in...

DSA-744-1 fuse - programming error

Bulletin has no description...

Debian DSA-744-1 : fuse - programming error

Sven Tantau discovered a security problem in fuse, a filesystem in userspace, that can be exploited by malicious, local users to disclose potentially sensitive information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

CVE-2005-1858

FUSE 2.x before 2.3.0 does not properly clear previously used memory from unfilled pages when the filesystem returns a short byte count to a read request, which may allow local users to obtain sensitive information...

CVE-2005-1858

CVE-2005-1858 affects FUSE: memory from previously used pages is not cleared when a read returns fewer bytes than requested in FUSE 2.x before 2.3.0, enabling local information disclosure. Connected sources show Debian advisories (DSA-744-1) stating a fix in fuse 2.3.0-1 and later; upgrade to 2.3...

CVE-2005-1858

FUSE 2.x before 2.3.0 does not properly clear previously used memory from unfilled pages when the filesystem returns a short byte count to a read request, which may allow local users to obtain sensitive information...