Vulnerability-Lookup

CVE-2010-0789 (GCVE-0-2010-0789)

Vulnerability from cvelistv5 – Published: 2010-03-02 18:00 – Updated: 2024-08-07 00:59

Summary

fusermount in FUSE before 2.7.5, and 2.8.x before 2.8.2, allows local users to unmount an arbitrary FUSE filesystem share via a symlink attack on a mountpoint.

Severity

No CVSS data available.

CWE

Assigner

mitre CNA under the mitre root

CNA scorecard E 29/100 over 2359 records in the last 180 days details

References

19 references

URL	Tags
http://sourceforge.net/projects/fuse/files/Releas…	x_refsource_CONFIRM
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567633	x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2010/1107	vdb-entryx_refsource_VUPEN
http://www.debian.org/security/2010/dsa-1989	vendor-advisoryx_refsource_DEBIAN
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
https://bugzilla.redhat.com/show_bug.cgi?id=558833	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://secunia.com/advisories/38261	third-party-advisoryx_refsource_SECUNIA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://bugzilla.redhat.com/show_bug.cgi?id=532940	x_refsource_CONFIRM
http://secunia.com/advisories/38359	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/38287	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/38437	third-party-advisoryx_refsource_SECUNIA
http://www.ubuntu.com/usn/USN-892-1	vendor-advisoryx_refsource_UBUNTU
http://sourceforge.net/projects/fuse/files/fuse-2…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/37983	vdb-entryx_refsource_BID
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA

Date Public

2010-01-26 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T00:59:39.262Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://sourceforge.net/projects/fuse/files/ReleaseNotes/fuse-2.8.3.html/view"
          },
          {
            "name": "FEDORA-2010-1159",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034580.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567633"
          },
          {
            "name": "ADV-2010-1107",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2010/1107"
          },
          {
            "name": "DSA-1989",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2010/dsa-1989"
          },
          {
            "name": "fuse-fusermount-dos(55945)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/55945"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=558833"
          },
          {
            "name": "SUSE-SR:2010:011",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html"
          },
          {
            "name": "SUSE-SR:2010:013",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
          },
          {
            "name": "38261",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38261"
          },
          {
            "name": "SUSE-SR:2010:003",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00003.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=532940"
          },
          {
            "name": "38359",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38359"
          },
          {
            "name": "38287",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38287"
          },
          {
            "name": "38437",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/38437"
          },
          {
            "name": "USN-892-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-892-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://sourceforge.net/projects/fuse/files/fuse-2.X/2.7.5/fuse-2.7.5.tar.gz/download"
          },
          {
            "name": "37983",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/37983"
          },
          {
            "name": "FEDORA-2010-1140",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034518.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-01-26T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "fusermount in FUSE before 2.7.5, and 2.8.x before 2.8.2, allows local users to unmount an arbitrary FUSE filesystem share via a symlink attack on a mountpoint."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-16T14:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://sourceforge.net/projects/fuse/files/ReleaseNotes/fuse-2.8.3.html/view"
        },
        {
          "name": "FEDORA-2010-1159",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034580.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567633"
        },
        {
          "name": "ADV-2010-1107",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2010/1107"
        },
        {
          "name": "DSA-1989",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2010/dsa-1989"
        },
        {
          "name": "fuse-fusermount-dos(55945)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/55945"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=558833"
        },
        {
          "name": "SUSE-SR:2010:011",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html"
        },
        {
          "name": "SUSE-SR:2010:013",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
        },
        {
          "name": "38261",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38261"
        },
        {
          "name": "SUSE-SR:2010:003",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00003.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=532940"
        },
        {
          "name": "38359",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38359"
        },
        {
          "name": "38287",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38287"
        },
        {
          "name": "38437",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/38437"
        },
        {
          "name": "USN-892-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-892-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://sourceforge.net/projects/fuse/files/fuse-2.X/2.7.5/fuse-2.7.5.tar.gz/download"
        },
        {
          "name": "37983",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/37983"
        },
        {
          "name": "FEDORA-2010-1140",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034518.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2010-0789",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "fusermount in FUSE before 2.7.5, and 2.8.x before 2.8.2, allows local users to unmount an arbitrary FUSE filesystem share via a symlink attack on a mountpoint."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://sourceforge.net/projects/fuse/files/ReleaseNotes/fuse-2.8.3.html/view",
              "refsource": "CONFIRM",
              "url": "http://sourceforge.net/projects/fuse/files/ReleaseNotes/fuse-2.8.3.html/view"
            },
            {
              "name": "FEDORA-2010-1159",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034580.html"
            },
            {
              "name": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567633",
              "refsource": "CONFIRM",
              "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567633"
            },
            {
              "name": "ADV-2010-1107",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2010/1107"
            },
            {
              "name": "DSA-1989",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2010/dsa-1989"
            },
            {
              "name": "fuse-fusermount-dos(55945)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/55945"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=558833",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=558833"
            },
            {
              "name": "SUSE-SR:2010:011",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html"
            },
            {
              "name": "SUSE-SR:2010:013",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
            },
            {
              "name": "38261",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38261"
            },
            {
              "name": "SUSE-SR:2010:003",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00003.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=532940",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=532940"
            },
            {
              "name": "38359",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38359"
            },
            {
              "name": "38287",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38287"
            },
            {
              "name": "38437",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/38437"
            },
            {
              "name": "USN-892-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-892-1"
            },
            {
              "name": "http://sourceforge.net/projects/fuse/files/fuse-2.X/2.7.5/fuse-2.7.5.tar.gz/download",
              "refsource": "CONFIRM",
              "url": "http://sourceforge.net/projects/fuse/files/fuse-2.X/2.7.5/fuse-2.7.5.tar.gz/download"
            },
            {
              "name": "37983",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/37983"
            },
            {
              "name": "FEDORA-2010-1140",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034518.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2010-0789",
    "datePublished": "2010-03-02T18:00:00.000Z",
    "dateReserved": "2010-03-02T00:00:00.000Z",
    "dateUpdated": "2024-08-07T00:59:39.262Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2010-0789",
      "date": "2026-10-22",
      "epss": "0.00394",
      "percentile": "0.32454"
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:fuse:fuse:1.9:*:*:*:*:*:*:*",
                    "matchCriteriaId": "55969766-1B53-4987-BED1-69210D870159",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:fuse:fuse:2.0:pre0:*:*:*:*:*:*",
                    "matchCriteriaId": "975404B1-A1D7-498E-BCAF-27F6F0C6D6DB",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:fuse:fuse:2.0:pre1:*:*:*:*:*:*",
                    "matchCriteriaId": "725C66E7-CDE5-447F-A718-1F8E09DBD03B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:fuse:fuse:2.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D694A371-E110-404C-8A8B-E162BE7CC420",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:fuse:fuse:2.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "57EA26ED-6A5B-46FD-B776-56164C2CA2A7",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:fuse:fuse:2.2.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4070A046-AFAF-47E7-8143-950E7113F7D9",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:fuse:fuse:2.3:pre:*:*:*:*:*:*",
                    "matchCriteriaId": "F58FB896-AC2F-44F6-B225-6B1E8B5D5AAA",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:fuse:fuse:2.3:rc1:*:*:*:*:*:*",
                    "matchCriteriaId": "046B9EE6-597B-4668-A7E3-3B2E19F2F1F2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:fuse:fuse:2.3.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7F6E73A6-7598-43D0-85B6-36854D241753",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:fuse:fuse:2.4.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "5C84298D-29DA-4E25-872C-C01123DC264B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:fuse:fuse:2.4.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "79145A4A-180B-4A01-9B27-FF41C80C8A2E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:fuse:fuse:2.4.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B8FB5A17-317D-4FCD-9135-7B6FBFF43122",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:fuse:fuse:2.5.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "86127064-585A-491A-9C02-3868293287E9",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:fuse:fuse:2.5.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D9AFE150-9202-478D-B9A5-A06631A7F654",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:fuse:fuse:2.5.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A203B9AA-AC5A-4F97-8B22-FD4CE9A5E9E6",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:fuse:fuse:2.5.3:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D88FC4B0-D669-4B8C-9F0E-8B40FD269707",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:fuse:fuse:2.6.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C58DA611-5C3C-48B5-9A97-AF61E79C2A11",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:fuse:fuse:2.6.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "745A4F8C-CB3C-40CF-9358-89403CDAC064",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:fuse:fuse:2.6.3:*:*:*:*:*:*:*",
                    "matchCriteriaId": "DA50E0DD-E42D-4A6B-A2D1-5EB5E032A3D5",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:fuse:fuse:2.6.5:*:*:*:*:*:*:*",
                    "matchCriteriaId": "166EEDD0-41AC-48F6-BB41-2199E07D70C5",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:fuse:fuse:2.7.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "55B8E8CD-A4C9-4542-BA8E-6A59352225F4",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:fuse:fuse:2.7.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3168CEE0-DCB6-48DC-B1A1-A7A24E0D4455",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:fuse:fuse:2.7.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "553EBB29-A227-428F-A752-BDFB100C954D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:fuse:fuse:2.7.3:*:*:*:*:*:*:*",
                    "matchCriteriaId": "55859957-F60A-452F-B41F-1C08ABA073A0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:fuse:fuse:2.7.4:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7E20A7A1-54C5-427C-8232-E4E8CCB16AC4",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "fusermount in FUSE before 2.7.5, and 2.8.x before 2.8.2, allows local users to unmount an arbitrary FUSE filesystem share via a symlink attack on a mountpoint."
          },
          {
            "lang": "es",
            "value": "fusermount en FUSE anteriores a v2.7.5, y v2.8.x anteriores a v2.8.2, permite a usuarios locales desmontar sistemas de ficheros compartidos FUSE arbitrarios a trav\u00e9s de un ataque de enlace simb\u00f3lico en un punto de montaje."
          }
        ],
        "id": "CVE-2010-0789",
        "lastModified": "2026-04-29T01:13:23.040",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "LOW",
              "cvssData": {
                "accessComplexity": "MEDIUM",
                "accessVector": "LOCAL",
                "authentication": "NONE",
                "availabilityImpact": "PARTIAL",
                "baseScore": 3.3,
                "confidentialityImpact": "NONE",
                "integrityImpact": "PARTIAL",
                "vectorString": "AV:L/AC:M/Au:N/C:N/I:P/A:P",
                "version": "2.0"
              },
              "exploitabilityScore": 3.4,
              "impactScore": 4.9,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ]
        },
        "published": "2010-03-02T18:30:01.117",
        "references": [
          {
            "source": "cve@mitre.org",
            "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567633"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034518.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034580.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00003.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/38261"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/38287"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/38359"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/38437"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://sourceforge.net/projects/fuse/files/ReleaseNotes/fuse-2.8.3.html/view"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Patch"
            ],
            "url": "http://sourceforge.net/projects/fuse/files/fuse-2.X/2.7.5/fuse-2.7.5.tar.gz/download"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Patch"
            ],
            "url": "http://www.debian.org/security/2010/dsa-1989"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Patch"
            ],
            "url": "http://www.securityfocus.com/bid/37983"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.ubuntu.com/usn/USN-892-1"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.vupen.com/english/advisories/2010/1107"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Patch"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=532940"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=558833"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/55945"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567633"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034518.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034580.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00003.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/38261"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/38287"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/38359"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/38437"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://sourceforge.net/projects/fuse/files/ReleaseNotes/fuse-2.8.3.html/view"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch"
            ],
            "url": "http://sourceforge.net/projects/fuse/files/fuse-2.X/2.7.5/fuse-2.7.5.tar.gz/download"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch"
            ],
            "url": "http://www.debian.org/security/2010/dsa-1989"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch"
            ],
            "url": "http://www.securityfocus.com/bid/37983"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.ubuntu.com/usn/USN-892-1"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.vupen.com/english/advisories/2010/1107"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=532940"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=558833"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/55945"
          }
        ],
        "sourceIdentifier": "cve@mitre.org",
        "vendorComments": [
          {
            "comment": "Red Hat is aware of this issue and is tracking it via the following bug: \nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2010-0789\n\nThis issue affects Red Hat Enterprise Linux 5 because it ships fusermount suid root, however the impact of this flaw is minimized due to the fact that only members in group fuse may use it the executable is owned root:fuse and mode 4750.\n\nRed Hat Enterprise Linux 3 and 4 do not provide the fuse package.\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here:\n\nhttp://www.redhat.com/security/updates/classification/",
            "lastModified": "2010-04-07T00:00:00",
            "organization": "Red Hat"
          }
        ],
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-59"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2025-11-21T13:07:27+00:00",
      "cve": "CVE-2010-0789",
      "id": "CVE-2010-0789",
      "initial_release_date": "2010-01-26T00:00:00+00:00",
      "product_status:known_affected": "1",
      "product_status:known_not_affected": "4",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "fuse: Race condition by umount (fusermount) operations",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2010/cve-2010-0789.json",
      "version": "3"
    }
  }
}

FKIE_CVE-2010-0789

Vulnerability from fkie_nvd - Published: 2010-03-02 18:30 - Updated: 2026-06-16 23:16

Severity

Summary

fusermount in FUSE before 2.7.5, and 2.8.x before 2.8.2, allows local users to unmount an arbitrary FUSE filesystem share via a symlink attack on a mountpoint.

References

URL	Tags
cve@mitre.org	http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567633
cve@mitre.org	http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034518.html
cve@mitre.org	http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034580.html
cve@mitre.org	http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00003.html
cve@mitre.org	http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html
cve@mitre.org	http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html
cve@mitre.org	http://secunia.com/advisories/38261	Vendor Advisory
cve@mitre.org	http://secunia.com/advisories/38287	Vendor Advisory
cve@mitre.org	http://secunia.com/advisories/38359	Vendor Advisory
cve@mitre.org	http://secunia.com/advisories/38437	Vendor Advisory
cve@mitre.org	http://sourceforge.net/projects/fuse/files/ReleaseNotes/fuse-2.8.3.html/view
cve@mitre.org	http://sourceforge.net/projects/fuse/files/fuse-2.X/2.7.5/fuse-2.7.5.tar.gz/download	Patch
cve@mitre.org	http://www.debian.org/security/2010/dsa-1989	Patch
cve@mitre.org	http://www.securityfocus.com/bid/37983	Patch
cve@mitre.org	http://www.ubuntu.com/usn/USN-892-1
cve@mitre.org	http://www.vupen.com/english/advisories/2010/1107
cve@mitre.org	https://bugzilla.redhat.com/show_bug.cgi?id=532940	Patch
cve@mitre.org	https://bugzilla.redhat.com/show_bug.cgi?id=558833
cve@mitre.org	https://exchange.xforce.ibmcloud.com/vulnerabilities/55945
af854a3a-2127-422b-91ae-364da2661108	http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567633
af854a3a-2127-422b-91ae-364da2661108	http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034518.html
af854a3a-2127-422b-91ae-364da2661108	http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034580.html
af854a3a-2127-422b-91ae-364da2661108	http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00003.html
af854a3a-2127-422b-91ae-364da2661108	http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html
af854a3a-2127-422b-91ae-364da2661108	http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/38261	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/38287	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/38359	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/38437	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://sourceforge.net/projects/fuse/files/ReleaseNotes/fuse-2.8.3.html/view
af854a3a-2127-422b-91ae-364da2661108	http://sourceforge.net/projects/fuse/files/fuse-2.X/2.7.5/fuse-2.7.5.tar.gz/download	Patch
af854a3a-2127-422b-91ae-364da2661108	http://www.debian.org/security/2010/dsa-1989	Patch
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/37983	Patch
af854a3a-2127-422b-91ae-364da2661108	http://www.ubuntu.com/usn/USN-892-1
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2010/1107
af854a3a-2127-422b-91ae-364da2661108	https://bugzilla.redhat.com/show_bug.cgi?id=532940	Patch
af854a3a-2127-422b-91ae-364da2661108	https://bugzilla.redhat.com/show_bug.cgi?id=558833
af854a3a-2127-422b-91ae-364da2661108	https://exchange.xforce.ibmcloud.com/vulnerabilities/55945

Impacted products

Vendor	Product	Version
fuse	fuse	1.9
fuse	fuse	2.0
fuse	fuse	2.0
fuse	fuse	2.1
fuse	fuse	2.2
fuse	fuse	2.2.1
fuse	fuse	2.3
fuse	fuse	2.3
fuse	fuse	2.3.0
fuse	fuse	2.4.0
fuse	fuse	2.4.1
fuse	fuse	2.4.2
fuse	fuse	2.5.0
fuse	fuse	2.5.1
fuse	fuse	2.5.2
fuse	fuse	2.5.3
fuse	fuse	2.6.0
fuse	fuse	2.6.1
fuse	fuse	2.6.3
fuse	fuse	2.6.5
fuse	fuse	2.7.0
fuse	fuse	2.7.1
fuse	fuse	2.7.2
fuse	fuse	2.7.3
fuse	fuse	2.7.4

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:fuse:fuse:1.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "55969766-1B53-4987-BED1-69210D870159",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fuse:fuse:2.0:pre0:*:*:*:*:*:*",
              "matchCriteriaId": "975404B1-A1D7-498E-BCAF-27F6F0C6D6DB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fuse:fuse:2.0:pre1:*:*:*:*:*:*",
              "matchCriteriaId": "725C66E7-CDE5-447F-A718-1F8E09DBD03B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fuse:fuse:2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "D694A371-E110-404C-8A8B-E162BE7CC420",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fuse:fuse:2.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "57EA26ED-6A5B-46FD-B776-56164C2CA2A7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fuse:fuse:2.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "4070A046-AFAF-47E7-8143-950E7113F7D9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fuse:fuse:2.3:pre:*:*:*:*:*:*",
              "matchCriteriaId": "F58FB896-AC2F-44F6-B225-6B1E8B5D5AAA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fuse:fuse:2.3:rc1:*:*:*:*:*:*",
              "matchCriteriaId": "046B9EE6-597B-4668-A7E3-3B2E19F2F1F2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fuse:fuse:2.3.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "7F6E73A6-7598-43D0-85B6-36854D241753",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fuse:fuse:2.4.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "5C84298D-29DA-4E25-872C-C01123DC264B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fuse:fuse:2.4.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "79145A4A-180B-4A01-9B27-FF41C80C8A2E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fuse:fuse:2.4.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "B8FB5A17-317D-4FCD-9135-7B6FBFF43122",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fuse:fuse:2.5.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "86127064-585A-491A-9C02-3868293287E9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fuse:fuse:2.5.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "D9AFE150-9202-478D-B9A5-A06631A7F654",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fuse:fuse:2.5.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "A203B9AA-AC5A-4F97-8B22-FD4CE9A5E9E6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fuse:fuse:2.5.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "D88FC4B0-D669-4B8C-9F0E-8B40FD269707",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fuse:fuse:2.6.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "C58DA611-5C3C-48B5-9A97-AF61E79C2A11",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fuse:fuse:2.6.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "745A4F8C-CB3C-40CF-9358-89403CDAC064",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fuse:fuse:2.6.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "DA50E0DD-E42D-4A6B-A2D1-5EB5E032A3D5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fuse:fuse:2.6.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "166EEDD0-41AC-48F6-BB41-2199E07D70C5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fuse:fuse:2.7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "55B8E8CD-A4C9-4542-BA8E-6A59352225F4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fuse:fuse:2.7.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "3168CEE0-DCB6-48DC-B1A1-A7A24E0D4455",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fuse:fuse:2.7.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "553EBB29-A227-428F-A752-BDFB100C954D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fuse:fuse:2.7.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "55859957-F60A-452F-B41F-1C08ABA073A0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:fuse:fuse:2.7.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "7E20A7A1-54C5-427C-8232-E4E8CCB16AC4",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "fusermount in FUSE before 2.7.5, and 2.8.x before 2.8.2, allows local users to unmount an arbitrary FUSE filesystem share via a symlink attack on a mountpoint."
    },
    {
      "lang": "es",
      "value": "fusermount en FUSE anteriores a v2.7.5, y v2.8.x anteriores a v2.8.2, permite a usuarios locales desmontar sistemas de ficheros compartidos FUSE arbitrarios a trav\u00e9s de un ataque de enlace simb\u00f3lico en un punto de montaje."
    }
  ],
  "id": "CVE-2010-0789",
  "lastModified": "2026-06-16T23:16:50.867",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "LOW",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 3.3,
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:L/AC:M/Au:N/C:N/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 3.4,
        "impactScore": 4.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2010-03-02T18:30:01.117",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567633"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034518.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034580.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00003.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/38261"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/38287"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/38359"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/38437"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://sourceforge.net/projects/fuse/files/ReleaseNotes/fuse-2.8.3.html/view"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "http://sourceforge.net/projects/fuse/files/fuse-2.X/2.7.5/fuse-2.7.5.tar.gz/download"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "http://www.debian.org/security/2010/dsa-1989"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "http://www.securityfocus.com/bid/37983"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.ubuntu.com/usn/USN-892-1"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2010/1107"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=532940"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=558833"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/55945"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567633"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034518.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034580.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00003.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/38261"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/38287"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/38359"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/38437"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://sourceforge.net/projects/fuse/files/ReleaseNotes/fuse-2.8.3.html/view"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://sourceforge.net/projects/fuse/files/fuse-2.X/2.7.5/fuse-2.7.5.tar.gz/download"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://www.debian.org/security/2010/dsa-1989"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://www.securityfocus.com/bid/37983"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.ubuntu.com/usn/USN-892-1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2010/1107"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=532940"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=558833"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/55945"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vendorComments": [
    {
      "comment": "Red Hat is aware of this issue and is tracking it via the following bug: \nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2010-0789\n\nThis issue affects Red Hat Enterprise Linux 5 because it ships fusermount suid root, however the impact of this flaw is minimized due to the fact that only members in group fuse may use it the executable is owned root:fuse and mode 4750.\n\nRed Hat Enterprise Linux 3 and 4 do not provide the fuse package.\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here:\n\nhttp://www.redhat.com/security/updates/classification/",
      "lastModified": "2010-04-07T00:00:00",
      "organization": "Red Hat"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-59"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-FGRW-X4F3-89H8

Vulnerability from github – Published: 2022-05-02 06:15 – Updated: 2022-05-02 06:15

Details

fusermount in FUSE before 2.7.5, and 2.8.x before 2.8.2, allows local users to unmount an arbitrary FUSE filesystem share via a symlink attack on a mountpoint.

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2010-0789"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-59"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2010-03-02T18:30:00Z",
    "severity": "LOW"
  },
  "details": "fusermount in FUSE before 2.7.5, and 2.8.x before 2.8.2, allows local users to unmount an arbitrary FUSE filesystem share via a symlink attack on a mountpoint.",
  "id": "GHSA-fgrw-x4f3-89h8",
  "modified": "2022-05-02T06:15:37Z",
  "published": "2022-05-02T06:15:37Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-0789"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=532940"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=558833"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/55945"
    },
    {
      "type": "WEB",
      "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567633"
    },
    {
      "type": "WEB",
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034518.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034580.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00003.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/38261"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/38287"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/38359"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/38437"
    },
    {
      "type": "WEB",
      "url": "http://sourceforge.net/projects/fuse/files/ReleaseNotes/fuse-2.8.3.html/view"
    },
    {
      "type": "WEB",
      "url": "http://sourceforge.net/projects/fuse/files/fuse-2.X/2.7.5/fuse-2.7.5.tar.gz/download"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2010/dsa-1989"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/37983"
    },
    {
      "type": "WEB",
      "url": "http://www.ubuntu.com/usn/USN-892-1"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2010/1107"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2010-0789

Vulnerability from gsd - Updated: 2023-12-13 01:21

Details

fusermount in FUSE before 2.7.5, and 2.8.x before 2.8.2, allows local users to unmount an arbitrary FUSE filesystem share via a symlink attack on a mountpoint.

Aliases

CVE-2010-0789

Aliases

CVE-2010-0789

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2010-0789",
    "description": "fusermount in FUSE before 2.7.5, and 2.8.x before 2.8.2, allows local users to unmount an arbitrary FUSE filesystem share via a symlink attack on a mountpoint.",
    "id": "GSD-2010-0789",
    "references": [
      "https://www.suse.com/security/cve/CVE-2010-0789.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2010-0789"
      ],
      "details": "fusermount in FUSE before 2.7.5, and 2.8.x before 2.8.2, allows local users to unmount an arbitrary FUSE filesystem share via a symlink attack on a mountpoint.",
      "id": "GSD-2010-0789",
      "modified": "2023-12-13T01:21:28.428286Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2010-0789",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "fusermount in FUSE before 2.7.5, and 2.8.x before 2.8.2, allows local users to unmount an arbitrary FUSE filesystem share via a symlink attack on a mountpoint."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "http://sourceforge.net/projects/fuse/files/ReleaseNotes/fuse-2.8.3.html/view",
            "refsource": "CONFIRM",
            "url": "http://sourceforge.net/projects/fuse/files/ReleaseNotes/fuse-2.8.3.html/view"
          },
          {
            "name": "FEDORA-2010-1159",
            "refsource": "FEDORA",
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034580.html"
          },
          {
            "name": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567633",
            "refsource": "CONFIRM",
            "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567633"
          },
          {
            "name": "ADV-2010-1107",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2010/1107"
          },
          {
            "name": "DSA-1989",
            "refsource": "DEBIAN",
            "url": "http://www.debian.org/security/2010/dsa-1989"
          },
          {
            "name": "fuse-fusermount-dos(55945)",
            "refsource": "XF",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/55945"
          },
          {
            "name": "https://bugzilla.redhat.com/show_bug.cgi?id=558833",
            "refsource": "CONFIRM",
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=558833"
          },
          {
            "name": "SUSE-SR:2010:011",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html"
          },
          {
            "name": "SUSE-SR:2010:013",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
          },
          {
            "name": "38261",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/38261"
          },
          {
            "name": "SUSE-SR:2010:003",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00003.html"
          },
          {
            "name": "https://bugzilla.redhat.com/show_bug.cgi?id=532940",
            "refsource": "CONFIRM",
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=532940"
          },
          {
            "name": "38359",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/38359"
          },
          {
            "name": "38287",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/38287"
          },
          {
            "name": "38437",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/38437"
          },
          {
            "name": "USN-892-1",
            "refsource": "UBUNTU",
            "url": "http://www.ubuntu.com/usn/USN-892-1"
          },
          {
            "name": "http://sourceforge.net/projects/fuse/files/fuse-2.X/2.7.5/fuse-2.7.5.tar.gz/download",
            "refsource": "CONFIRM",
            "url": "http://sourceforge.net/projects/fuse/files/fuse-2.X/2.7.5/fuse-2.7.5.tar.gz/download"
          },
          {
            "name": "37983",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/37983"
          },
          {
            "name": "FEDORA-2010-1140",
            "refsource": "FEDORA",
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034518.html"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:fuse:fuse:2.4.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:fuse:fuse:2.4.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:fuse:fuse:2.6.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:fuse:fuse:2.6.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:fuse:fuse:2.7.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:fuse:fuse:2.3:pre:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:fuse:fuse:2.3:rc1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:fuse:fuse:2.3.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:fuse:fuse:2.4.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:fuse:fuse:2.6.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:fuse:fuse:2.6.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:fuse:fuse:2.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:fuse:fuse:2.2.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:fuse:fuse:1.9:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:fuse:fuse:2.0:pre0:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:fuse:fuse:2.5.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:fuse:fuse:2.5.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:fuse:fuse:2.7.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:fuse:fuse:2.7.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:fuse:fuse:2.0:pre1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:fuse:fuse:2.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:fuse:fuse:2.5.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:fuse:fuse:2.5.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:fuse:fuse:2.7.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:fuse:fuse:2.7.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2010-0789"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "fusermount in FUSE before 2.7.5, and 2.8.x before 2.8.2, allows local users to unmount an arbitrary FUSE filesystem share via a symlink attack on a mountpoint."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-59"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "37983",
              "refsource": "BID",
              "tags": [
                "Patch"
              ],
              "url": "http://www.securityfocus.com/bid/37983"
            },
            {
              "name": "DSA-1989",
              "refsource": "DEBIAN",
              "tags": [
                "Patch"
              ],
              "url": "http://www.debian.org/security/2010/dsa-1989"
            },
            {
              "name": "38287",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/38287"
            },
            {
              "name": "USN-892-1",
              "refsource": "UBUNTU",
              "tags": [],
              "url": "http://www.ubuntu.com/usn/USN-892-1"
            },
            {
              "name": "http://sourceforge.net/projects/fuse/files/ReleaseNotes/fuse-2.8.3.html/view",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://sourceforge.net/projects/fuse/files/ReleaseNotes/fuse-2.8.3.html/view"
            },
            {
              "name": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567633",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567633"
            },
            {
              "name": "38261",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/38261"
            },
            {
              "name": "38437",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/38437"
            },
            {
              "name": "FEDORA-2010-1159",
              "refsource": "FEDORA",
              "tags": [],
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034580.html"
            },
            {
              "name": "38359",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/38359"
            },
            {
              "name": "http://sourceforge.net/projects/fuse/files/fuse-2.X/2.7.5/fuse-2.7.5.tar.gz/download",
              "refsource": "CONFIRM",
              "tags": [
                "Patch"
              ],
              "url": "http://sourceforge.net/projects/fuse/files/fuse-2.X/2.7.5/fuse-2.7.5.tar.gz/download"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=558833",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=558833"
            },
            {
              "name": "FEDORA-2010-1140",
              "refsource": "FEDORA",
              "tags": [],
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034518.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=532940",
              "refsource": "CONFIRM",
              "tags": [
                "Patch"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=532940"
            },
            {
              "name": "SUSE-SR:2010:003",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00003.html"
            },
            {
              "name": "ADV-2010-1107",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2010/1107"
            },
            {
              "name": "SUSE-SR:2010:011",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html"
            },
            {
              "name": "SUSE-SR:2010:013",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
            },
            {
              "name": "fuse-fusermount-dos(55945)",
              "refsource": "XF",
              "tags": [],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/55945"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 3.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:L/AC:M/Au:N/C:N/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 3.4,
          "impactScore": 4.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "LOW",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2017-08-17T01:32Z",
      "publishedDate": "2010-03-02T18:30Z"
    }
  }
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2010-0789 (GCVE-0-2010-0789)

FKIE_CVE-2010-0789

GHSA-FGRW-X4F3-89H8

GSD-2010-0789

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour