Vulnerability in Miklos Szeredi Fuse
CVE-2005-3531
fusermount in FUSE before 2.4.1, if installed setuid root, allows local users to corrupt /etc/mtab and possibly modify mount options by performing a mount over a directory whose name contains certain special characters.
EPSS: 0.004 (29.1th percentile) — read the EPSS interpretation.
Affected products
- Miklos_szeredi Fuse — versions 2.2, 2.2.1, 2.3.0
- N/a — versions n/a
Public proof-of-concept exploits
References
- security@debian.org (vendor-advisory, Patch, x_refsource_GENTOO, Vendor Advisory)
- security@debian.org (Patch, vdb-entry, x_refsource_BID)
- security@debian.org (vendor-advisory, x_refsource_MANDRAKE)
- security@debian.org (x_refsource_SECUNIA, third-party-advisory)
- security@debian.org (x_refsource_SECUNIA, third-party-advisory)
- security@debian.org (vdb-entry, x_refsource_VUPEN)
Frequently asked questions
- What is CVE-2005-3531?
- CVE-2005-3531 is a vulnerability in Miklos Szeredi Fuse. Published 2005-11-23.
- Is CVE-2005-3531 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.