fusermount in FUSE before 2.4.1, if installed setuid root, allows local users to corrupt /etc/mtab and possibly modify mount options by performing a mount over a directory whose name contains certain special characters.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Fuse | Miklos_szeredi | 2.2 (including) | 2.2 (including) |
| Fuse | Miklos_szeredi | 2.2.1 (including) | 2.2.1 (including) |
| Fuse | Miklos_szeredi | 2.3.0 (including) | 2.3.0 (including) |
| Fuse | Miklos_szeredi | 2.3_rc1 (including) | 2.3_rc1 (including) |
| Fuse | Miklos_szeredi | 2.4.0 (including) | 2.4.0 (including) |
| Fuse | Ubuntu | dapper | * |
| Fuse | Ubuntu | devel | * |
| Fuse | Ubuntu | edgy | * |
| Fuse | Ubuntu | feisty | * |