Local filesystem unmounting vulnerability in FUSE by The FUSE Team
CVE-2010-3879

Currently unrated

Key Information:

Vendor: Libfuse Project
Status: Libfuse
Vendor: CVE Published:; 22 January 2011

🔔 Create Libfuse Project Vulnerability Alert

What is CVE-2010-3879?

A vulnerability in FUSE allows local users to exploit the system by creating malicious mtab entries through symlink attacks, enabling them to unmount any filesystem. This issue arises when an attacker manipulates the parent directory of the mountpoint of a FUSE filesystem. Consequently, unauthorized users may impact system stability and data integrity with this exploit. The vulnerability affects FUSE 2.8.5 and earlier versions, highlighting the need for proper access controls and security measures.

References

http://www.halfdog.net/Security/FuseTimerace/

x_refsource_MISC

http://www.ubuntu.com/usn/USN-1045-1

vendor-advisoryx_refsource_UBUNTU

http://secunia.com/advisories/42965

third-party-advisoryx_refsource_SECUNIA

EPSS Score

9% chance of being exploited in the next 30 days.

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jan 22, 2011
Vulnerability Reserved
Oct 8, 2010

CVE-2010-3879 Data

JSON