Vulnerability-Lookup

CERTA-2005-AVI-472

Vulnerability from certfr_avis - Published: 2005-11-30 - Updated: 2005-11-30

Une vulnérabilité a été découverte dans FUSE permettant d'élever ses privilèges en local sur un système vulnérable.

Description

FUSE est un outil permettant d'implémenter un système de fichier dans l'espace de travail d'un programme.

FUSE présente une vulnérabilité permettant à un utilisateur local mal intentionné de corrompre le fichier /etc/mtab.

L'exploitation de cette vulnérabilité n'est possible que si le programme est installé avec le drapeau suid root.

Contournement provisoire

Retirer de l'application le drapeau suid root.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

FUSE version 2.4.1 et versions antérieures.

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

Tags

Bulletin de sécurité de FUSE	None	vendor-advisory
Bulletin de sécurité Gentoo GLSA-200511-17 du 22 novembre 2005 :	-	other
Bulletin de sécurité FUSE du 17 novembre 2005:	-	other
Bulletin de sécurité Mandriva MDKSA-2005:216 du 24 novembre 2005 :	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cp\u003eFUSE version 2.4.1 et versions  ant\u00e9rieures.\u003c/p\u003e",
  "content": "## Description\n\nFUSE est un outil permettant d\u0027impl\u00e9menter un syst\u00e8me de fichier dans\nl\u0027espace de travail d\u0027un programme.\n\nFUSE pr\u00e9sente une vuln\u00e9rabilit\u00e9 permettant \u00e0 un utilisateur local mal\nintentionn\u00e9 de corrompre le fichier /etc/mtab.\n\nL\u0027exploitation de cette vuln\u00e9rabilit\u00e9 n\u0027est possible que si le programme\nest install\u00e9 avec le drapeau suid root.\n\n## Contournement provisoire\n\nRetirer de l\u0027application le drapeau suid root.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2005-3531",
      "url": "https://www.cve.org/CVERecord?id=CVE-2005-3531"
    }
  ],
  "initial_release_date": "2005-11-30T00:00:00",
  "last_revision_date": "2005-11-30T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Gentoo GLSA-200511-17 du 22 novembre    2005 :",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200511-17.xml"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 FUSE du 17 novembre 2005:",
      "url": "http://sourceforge.net/project/shownotes.php?release_id=373087"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Mandriva MDKSA-2005:216 du 24 novembre    2005 :",
      "url": "http://frontal2.mandriva.com/security/advisories?name=MDKSA-2005:216"
    }
  ],
  "reference": "CERTA-2005-AVI-472",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2005-11-30T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans FUSE permettant d\u0027\u00e9lever ses\nprivil\u00e8ges en local sur un syst\u00e8me vuln\u00e9rable.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans le logiciel FUSE",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 de FUSE",
      "url": null
    }
  ]
}

CVE-2005-3531 (GCVE-0-2005-3531)

Vulnerability from cvelistv5 – Published: 2005-11-23 00:00 – Updated: 2024-08-07 23:17

Summary

fusermount in FUSE before 2.4.1, if installed setuid root, allows local users to corrupt /etc/mtab and possibly modify mount options by performing a mount over a directory whose name contains certain special characters.

Severity ?

No CVSS data available.

CWE

Assigner

debian

References

URL

Tags

	http://www.gentoo.org/security/en/glsa/glsa-20051…	vendor-advisoryx_refsource_GENTOO
	http://www.securityfocus.com/bid/15529	vdb-entryx_refsource_BID
	http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRAKE
	http://secunia.com/advisories/17691	third-party-advisoryx_refsource_SECUNIA
	http://secunia.com/advisories/17695	third-party-advisoryx_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2005/2529	vdb-entryx_refsource_VUPEN

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T23:17:22.671Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "GLSA-200511-17",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200511-17.xml"
          },
          {
            "name": "15529",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/15529"
          },
          {
            "name": "MDKSA-2005:216",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRAKE",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:216"
          },
          {
            "name": "17691",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17691"
          },
          {
            "name": "17695",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/17695"
          },
          {
            "name": "ADV-2005-2529",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2005/2529"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-11-22T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "fusermount in FUSE before 2.4.1, if installed setuid root, allows local users to corrupt /etc/mtab and possibly modify mount options by performing a mount over a directory whose name contains certain special characters."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2005-11-30T10:00:00",
        "orgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5",
        "shortName": "debian"
      },
      "references": [
        {
          "name": "GLSA-200511-17",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200511-17.xml"
        },
        {
          "name": "15529",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/15529"
        },
        {
          "name": "MDKSA-2005:216",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRAKE"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:216"
        },
        {
          "name": "17691",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17691"
        },
        {
          "name": "17695",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/17695"
        },
        {
          "name": "ADV-2005-2529",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2005/2529"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@debian.org",
          "ID": "CVE-2005-3531",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "fusermount in FUSE before 2.4.1, if installed setuid root, allows local users to corrupt /etc/mtab and possibly modify mount options by performing a mount over a directory whose name contains certain special characters."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "GLSA-200511-17",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200511-17.xml"
            },
            {
              "name": "15529",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/15529"
            },
            {
              "name": "MDKSA-2005:216",
              "refsource": "MANDRAKE",
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:216"
            },
            {
              "name": "17691",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17691"
            },
            {
              "name": "17695",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/17695"
            },
            {
              "name": "ADV-2005-2529",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2005/2529"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5",
    "assignerShortName": "debian",
    "cveId": "CVE-2005-3531",
    "datePublished": "2005-11-23T00:00:00",
    "dateReserved": "2005-11-16T00:00:00",
    "dateUpdated": "2024-08-07T23:17:22.671Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CERTA-2005-AVI-472

Description

Contournement provisoire

Solution

CVE-2005-3531 (GCVE-0-2005-3531)

Tags

Sightings

Nomenclature