fusermount in FUSE before 2.4.1, if installed setuid root, allows local users to corrupt /etc/mtab and possibly modify mount options by performing a mount over a directory whose name contains certain special characters.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Fuse | Miklos_szeredi | 2.2 (including) | 2.2 (including) |
Fuse | Miklos_szeredi | 2.2.1 (including) | 2.2.1 (including) |
Fuse | Miklos_szeredi | 2.3.0 (including) | 2.3.0 (including) |
Fuse | Miklos_szeredi | 2.3_rc1 (including) | 2.3_rc1 (including) |
Fuse | Miklos_szeredi | 2.4.0 (including) | 2.4.0 (including) |