Test ID:	1.3.6.1.4.1.25623.1.0.68813
Category:	Ubuntu Local Security Checks
Title:	Ubuntu USN-1045-1 (fuse)
Summary:	Ubuntu USN-1045-1 (fuse)
Description:	The remote host is missing an update to fuse announced via advisory USN-1045-1. Details follow: It was discovered that FUSE could be tricked into incorrectly updating the mtab file when mounting filesystems. A local attacker, with access to use FUSE, could unmount arbitrary locations, leading to a denial of service. Solution: The problem can be corrected by upgrading your system to the following package versions: Ubuntu 8.04 LTS: fuse-utils 2.7.2-1ubuntu2.2 Ubuntu 9.10: fuse-utils 2.7.4-1.1ubuntu4.4 Ubuntu 10.04 LTS: fuse-utils 2.8.1-1.1ubuntu2.2 Ubuntu 10.10: fuse-utils 2.8.4-1ubuntu1.1 In general, a standard system update will make all the necessary changes. http://www.securityspace.com/smysecure/catid.html?in=USN-1045-1 Risk factor : High
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-3879 http://lists.grok.org.uk/pipermail/full-disclosure/2010-November/077247.html http://openwall.com/lists/oss-security/2010/11/04/8 http://openwall.com/lists/oss-security/2010/11/05/2 http://www.halfdog.net/Security/FuseTimerace/ http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053792.html http://www.ubuntu.com/usn/USN-1045-1 http://www.ubuntu.com/usn/USN-1045-2 BugTraq ID: 44623 http://www.securityfocus.com/bid/44623 http://osvdb.org/70520 http://secunia.com/advisories/42965 http://secunia.com/advisories/42961 http://www.vupen.com/english/advisories/2011/0181 http://www.vupen.com/english/advisories/2011/0302 XForce ISS Database: fuse-fusermount-tool-dos(62986) http://xforce.iss.net/xforce/xfdb/62986
Copyright	Copyright (c) 2011 E-Soft Inc. http://www.securityspace.com

This is only one of 32582 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: