Test ID:	1.3.6.1.4.1.25623.1.0.69133
Category:	Ubuntu Local Security Checks
Title:	Ubuntu USN-1077-1 (fuse)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to fuse announced via advisory USN-1077-1. Details follow: It was discovered that FUSE would incorrectly follow symlinks when checking mountpoints under certain conditions. A local attacker, with access to use FUSE, could unmount arbitrary locations, leading to a denial of service. Solution: The problem can be corrected by upgrading your system to the following package versions: Ubuntu 8.04 LTS: fuse-utils 2.7.2-1ubuntu2.3 Ubuntu 9.10: fuse-utils 2.7.4-1.1ubuntu4.5 Ubuntu 10.04 LTS: fuse-utils 2.8.1-1.1ubuntu3.1 Ubuntu 10.10: fuse-utils 2.8.4-1ubuntu1.3 In general, a standard system update will make all the necessary changes. http://www.securityspace.com/smysecure/catid.html?in=USN-1077-1 Risk factor : Medium CVSS Score: 3.3
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-3297 Common Vulnerability Exposure (CVE) ID: CVE-2011-0541 SUSE-SR:2011:005 http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html [oss-security] 20110201 CVE request: fuse http://www.openwall.com/lists/oss-security/2011/02/02/2 [oss-security] 20110203 Re: CVE request: fuse http://www.openwall.com/lists/oss-security/2011/02/03/5 [oss-security] 20110208 Re: CVE request: fuse http://www.openwall.com/lists/oss-security/2011/02/08/4 http://fuse.git.sourceforge.net/git/gitweb.cgi?p=fuse/fuse%3Ba=commit%3Bh=bf5ffb5fd8558bd799791834def431c0cee5a11f Common Vulnerability Exposure (CVE) ID: CVE-2011-0542 http://fuse.git.sourceforge.net/git/gitweb.cgi?p=fuse/fuse%3Ba=commit%3Bh=1e7607ff89c65b005f69e27aeb1649d624099873 Common Vulnerability Exposure (CVE) ID: CVE-2011-0543 http://fuse.git.sourceforge.net/git/gitweb.cgi?p=fuse/fuse%3Ba=commit%3Bh=cbd3a2a84068aae6e3fe32939d88470d712dbf47
Copyright	Copyright (c) 2011 E-Soft Inc. http://www.securityspace.com

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.