CVE-2010-0789

Published: Mar 2, 2010Modified: Apr 29, 2026

3.3

Vector

AV:L/AC:M/Au:N/C:N/I:P/A:P

Exploitability: 3.4 / Impact: 4.9

Source: NVD

Description

fusermount in FUSE before 2.7.5, and 2.8.x before 2.8.2, allows local users to unmount an arbitrary FUSE filesystem share via a symlink attack on a mountpoint.

Affected (25)

Products: Fuse: Fuse

1 product

Configuration A

25 vulnerable

Vulnerable Software	Affected Versions
Fuse Fuse	Version 1.9
Fuse Fuse	Version 2.0 pre0
Fuse Fuse	Version 2.0 pre1
Fuse Fuse	Version 2.1
Fuse Fuse	Version 2.2.1
Fuse Fuse	Version 2.2
Fuse Fuse	Version 2.3.0
Fuse Fuse	Version 2.3 pre
Fuse Fuse	Version 2.3 rc1
Fuse Fuse	Version 2.4.0
Fuse Fuse	Version 2.4.1
Fuse Fuse	Version 2.4.2
Fuse Fuse	Version 2.5.0
Fuse Fuse	Version 2.5.1
Fuse Fuse	Version 2.5.2
Fuse Fuse	Version 2.5.3
Fuse Fuse	Version 2.6.0
Fuse Fuse	Version 2.6.1
Fuse Fuse	Version 2.6.3
Fuse Fuse	Version 2.6.5
Fuse Fuse	Version 2.7.0
Fuse Fuse	Version 2.7.1
Fuse Fuse	Version 2.7.2
Fuse Fuse	Version 2.7.3
Fuse Fuse	Version 2.7.4

Related CWEs

Improper Link Resolution Before File Access ('Link Following')

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

References (38)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567633

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034518.html

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034580.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00003.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html

Source: cve@mitre.org

http://secunia.com/advisories/38261

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/38287

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/38359

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/38437

Source: cve@mitre.org

Vendor Advisory

http://sourceforge.net/projects/fuse/files/ReleaseNotes/fuse-2.8.3.html/view

Source: cve@mitre.org

http://sourceforge.net/projects/fuse/files/fuse-2.X/2.7.5/fuse-2.7.5.tar.gz/download

Source: cve@mitre.org

Patch

http://www.debian.org/security/2010/dsa-1989

Source: cve@mitre.org

Patch

http://www.securityfocus.com/bid/37983

Source: cve@mitre.org

Patch

http://www.ubuntu.com/usn/USN-892-1

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2010/1107

Source: cve@mitre.org

https://bugzilla.redhat.com/show_bug.cgi?id=532940

Source: cve@mitre.org

Patch

https://bugzilla.redhat.com/show_bug.cgi?id=558833

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/55945

Source: cve@mitre.org

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567633

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034518.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034580.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00003.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/38261

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/38287

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/38359

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/38437

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://sourceforge.net/projects/fuse/files/ReleaseNotes/fuse-2.8.3.html/view

Source: af854a3a-2127-422b-91ae-364da2661108

http://sourceforge.net/projects/fuse/files/fuse-2.X/2.7.5/fuse-2.7.5.tar.gz/download

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.debian.org/security/2010/dsa-1989

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.securityfocus.com/bid/37983

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.ubuntu.com/usn/USN-892-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2010/1107

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=532940

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://bugzilla.redhat.com/show_bug.cgi?id=558833

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/55945

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.