fusermount in fuse 2.8.5 and earlier does not perform a chdir to / before performing a mount or umount, which allows local users to unmount arbitrary directories via unspecified vectors.
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
Link | Tags |
---|---|
http://fuse.git.sourceforge.net/git/gitweb.cgi?p=fuse/fuse%3Ba=commit%3Bh=1e7607ff89c65b005f69e27aeb1649d624099873 | |
http://www.openwall.com/lists/oss-security/2011/02/02/2 | mailing list patch |
http://www.openwall.com/lists/oss-security/2011/02/03/5 | mailing list patch |
http://www.openwall.com/lists/oss-security/2011/02/08/4 | mailing list patch |