CVE-2010-3879

MEDIO 5.8CVE-2010-3879 · Published 22/01/2011 · updated 16/06/2026

In breve

CVE-2010-3879 è una vulnerabilità MEDIO (CVSS 5.8) che riguarda libfuse (libfuse project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 9.8%, superiore al 95.6% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
libfuse libfuse_project	`≤ 2.8.5`	No fix yet

Description

FUSE, possibly 2.8.5 and earlier, allows local users to create mtab entries with arbitrary pathnames, and consequently unmount any filesystem, via a symlink attack on the parent directory of the mountpoint of a FUSE filesystem, a different vulnerability than CVE-2010-0789.

References

bugs.debian.org/cgi-bin/bugreport.cgi · Exploit
lists.fedoraproject.org/pipermail/package-announce/2011-February/053792.html · Third Party Advisory
lists.grok.org.uk/pipermail/full-disclosure/2010-November/077247.html · Exploit
lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html · Third Party Advisory
openwall.com/lists/oss-security/2010/11/04/8 · Exploit
openwall.com/lists/oss-security/2010/11/05/2 · Exploit
osvdb.org/70520 · Broken Link
secunia.com/advisories/42961 · Third Party Advisory
secunia.com/advisories/42965 · Third Party Advisory
halfdog.net/Security/FuseTimerace · Exploit
mandriva.com/security/advisories · Third Party Advisory
securityfocus.com/bid/44623

Altre vulnerabilità di libfuse

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free