CVE-2011-0541 — Link Following in Fuse

CWE-59 — Link Following8 documents8 sources
Severity
3.3LOWNVD
EPSS
0.0%
top 87.18%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Redhat FuseFuse
Timeline
PublishedSep 2
Latest updateMay 17

Description

fuse 2.8.5 and earlier does not properly handle when /etc/mtab cannot be updated, which allows local users to unmount arbitrary directories via a symlink attack.

CVSS vector

AV:L/AC:M/C:N/I:P/A:PExploitability: 3.4 | Impact: 4.9

Affected Packages2 packages

▶Debianredhat/fuse< 2.8.5-1+2
▶NVDfuse/fuse2.8.5+30

Patches

Patch: www.openwall.com ↗Patch: www.openwall.com ↗Patch: www.openwall.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-c7fc-4fvh-989j: fuse 2↗2022-05-17
▶
OSV
CVE-2011-0541: fuse 2↗2011-09-02
▶
CVEList
CVE-2011-0541: fuse 2↗2011-09-02
▶

📋Vendor Advisories

3
Ubuntu
FUSE vulnerabilities↗2011-02-28
▶
Debian
CVE-2011-0541: fuse - fuse 2.8.5 and earlier does not properly handle when /etc/mtab cannot be updated...↗2011
▶
Red Hat
fuse: unprivileged user can unmount arbitrary locations via symlink attack↗2010-11-02
▶

💬Community

1
Bugzilla
CVE-2010-3879 CVE-2011-0541 CVE-2011-0542 CVE-2011-0543 fuse: unprivileged user can unmount arbitrary locations via symlink attack↗2010-11-08
▶
CVE-2011-0541 — Link Following in Fuse | cvebase