CVE-2011-0542

Related Files

Red Hat Security Advisory 2011-1083-01

Posted Jul 21, 2011

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2011-1083-01 - FUSE can implement a fully functional file system in a user-space program. These packages provide the mount utility, fusermount, the tool used to mount FUSE file systems. Multiple flaws were found in the way fusermount handled the mounting and unmounting of directories when symbolic links were present. A local user in the fuse group could use these flaws to unmount file systems, which they would otherwise not be able to unmount and that were not mounted using FUSE, via a symbolic link attack.

tags | advisory, local

systems | linux, redhat

advisories | CVE-2010-3879, CVE-2011-0541, CVE-2011-0542, CVE-2011-0543

SHA-256 | 570a3ac9c4d8ba47567744f3a2508ef5c64019b15a6120d40f7b53ce18ed1cd0

Download | Favorite | View

Ubuntu Security Notice USN-1077-1

Posted Feb 28, 2011

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 1077-1 - It was discovered that FUSE would incorrectly follow symlinks when checking mountpoints under certain conditions. A local attacker, with access to use FUSE, could unmount arbitrary locations, leading to a denial of service.

tags | advisory, denial of service, arbitrary, local

systems | linux, ubuntu

advisories | CVE-2009-3297, CVE-2011-0541, CVE-2011-0542, CVE-2011-0543

SHA-256 | 7abc581d95fd6fa91f14b15d1919d17c1f65a3f627fcc6b20f76aa12c42d3cce

Download | Favorite | View