Vulnerability   
Search   
    Search 324607 CVE descriptions
and 146377 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.840606
Category:Ubuntu Local Security Checks
Title:Ubuntu: Security Advisory (USN-1077-1)
Summary:The remote host is missing an update for the 'fuse' package(s) announced via the USN-1077-1 advisory.
Description:Summary:
The remote host is missing an update for the 'fuse' package(s) announced via the USN-1077-1 advisory.

Vulnerability Insight:
It was discovered that FUSE would incorrectly follow symlinks when checking
mountpoints under certain conditions. A local attacker, with access to use
FUSE, could unmount arbitrary locations, leading to a denial of service.

Affected Software/OS:
'fuse' package(s) on Ubuntu 8.04, Ubuntu 9.10, Ubuntu 10.04, Ubuntu 10.10.

Solution:
Please install the updated package(s).

CVSS Score:
3.3

CVSS Vector:
AV:L/AC:M/Au:N/C:N/I:P/A:P

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2011-0541
SUSE-SR:2011:005
http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html
[oss-security] 20110201 CVE request: fuse
http://www.openwall.com/lists/oss-security/2011/02/02/2
[oss-security] 20110203 Re: CVE request: fuse
http://www.openwall.com/lists/oss-security/2011/02/03/5
[oss-security] 20110208 Re: CVE request: fuse
http://www.openwall.com/lists/oss-security/2011/02/08/4
http://fuse.git.sourceforge.net/git/gitweb.cgi?p=fuse/fuse%3Ba=commit%3Bh=bf5ffb5fd8558bd799791834def431c0cee5a11f
Common Vulnerability Exposure (CVE) ID: CVE-2011-0542
http://fuse.git.sourceforge.net/git/gitweb.cgi?p=fuse/fuse%3Ba=commit%3Bh=1e7607ff89c65b005f69e27aeb1649d624099873
Common Vulnerability Exposure (CVE) ID: CVE-2011-0543
http://fuse.git.sourceforge.net/git/gitweb.cgi?p=fuse/fuse%3Ba=commit%3Bh=cbd3a2a84068aae6e3fe32939d88470d712dbf47
CopyrightCopyright (C) 2011 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.