Jann Horn of Google Project Zero discovered that NTFS-3G, a read-write NTFS driver for FUSE, does not scrub the environment before executing modprobe with elevated privileges. A local user can take advantage of this flaw for local root privilege escalation.
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
| Link | Tags |
|---|---|
| https://security.gentoo.org/glsa/201702-10 | third party advisory vendor advisory |
| https://www.debian.org/security/2017/dsa-3780 | vendor advisory |
| https://www.exploit-db.com/exploits/41240/ | exploit vdb entry third party advisory |
| https://www.exploit-db.com/exploits/41356/ | exploit vdb entry third party advisory |
| http://www.securityfocus.com/bid/95987 | vdb entry third party advisory |
| https://marc.info/?l=oss-security&m=148594671929354&w=2 | mailing list exploit third party advisory |
| http://www.openwall.com/lists/oss-security/2017/02/04/1 | third party advisory mailing list |