Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2015-3202

Опубликовано: 02 июл. 2015
Источник: nvd
CVSS2: 3.6
EPSS Низкий

Описание

fusermount in FUSE before 2.9.3-15 does not properly clear the environment before invoking (1) mount or (2) umount as root, which allows local users to write to arbitrary files via a crafted LIBMOUNT_MTAB environment variable that is used by mount's debugging feature.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Конфигурация 2
cpe:2.3:a:fuse_project:fuse:*:*:*:*:*:*:*:*
Версия до 2.9.2 (включая)

EPSS

Процентиль: 48%
0.00247
Низкий

3.6 Low

CVSS2

Дефекты

CWE-264

Связанные уязвимости

ubuntu
больше 10 лет назад

fusermount in FUSE before 2.9.3-15 does not properly clear the environment before invoking (1) mount or (2) umount as root, which allows local users to write to arbitrary files via a crafted LIBMOUNT_MTAB environment variable that is used by mount's debugging feature.

redhat
больше 10 лет назад

fusermount in FUSE before 2.9.3-15 does not properly clear the environment before invoking (1) mount or (2) umount as root, which allows local users to write to arbitrary files via a crafted LIBMOUNT_MTAB environment variable that is used by mount's debugging feature.

debian
больше 10 лет назад

fusermount in FUSE before 2.9.3-15 does not properly clear the environ ...

suse-cvrf
больше 10 лет назад

Security update for fuse

suse-cvrf
больше 10 лет назад

Security update for FUSE

EPSS

Процентиль: 48%
0.00247
Низкий

3.6 Low

CVSS2

Дефекты

CWE-264