CVE-2011-0541

Publication date 10 February 2011

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

fuse 2.8.5 and earlier does not properly handle when /etc/mtab cannot be updated, which allows local users to unmount arbitrary directories via a symlink attack.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
fuse 10.10 maverick
Fixed 2.8.4-1ubuntu1.3
10.04 LTS lucid
Fixed 2.8.1-1.1ubuntu3.1
9.10 karmic
Fixed 2.7.4-1.1ubuntu4.5
8.04 LTS hardy
Fixed 2.7.2-1ubuntu2.3
6.06 LTS dapper Ignored end of life

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package Patch details
fuse

References

Related Ubuntu Security Notices (USN)

    • USN-1077-1
    • FUSE vulnerabilities
    • 28 February 2011

Other references