{"api_version":"1","generated_at":"2026-07-23T04:34:50+00:00","cve":"CVE-2010-0789","urls":{"html":"https://cve.report/CVE-2010-0789","api":"https://cve.report/api/cve/CVE-2010-0789.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2010-0789","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2010-0789"},"summary":{"title":"CVE-2010-0789","description":"fusermount in FUSE before 2.7.5, and 2.8.x before 2.8.2, allows local users to unmount an arbitrary FUSE filesystem share via a symlink attack on a mountpoint.","state":"PUBLISHED","assigner":"mitre","published_at":"2010-03-02 18:30:01","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-59","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"3.3","severity":"","vector":"AV:L/AC:M/Au:N/C:N/I:P/A:P","data":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:P/A:P","baseScore":3.3,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html","name":"http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"[security-announce] SUSE Security Summary Report: SUSE-SR:2010:013","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=558833","name":"https://bugzilla.redhat.com/show_bug.cgi?id=558833","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Bug 558833 – CVE-2009-3297 samba, fuse, ncpfs: Race condition by mount (mount.cifs, ncpmount) / umount (fusermount, ncpumount) operations [Fedora all]","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=532940","name":"https://bugzilla.redhat.com/show_bug.cgi?id=532940","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"Bug 532940 – CVE-2010-0788 ncpfs: Race condition by mount (ncpmount) / umount (ncpumount) operations","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567633","name":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567633","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"#567633 - race condition in fusermount - Debian Bug report logs","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/37983","name":"http://www.securityfocus.com/bid/37983","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"FUSE 'fusermount' Race Condition Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.ubuntu.com/usn/USN-892-1","name":"http://www.ubuntu.com/usn/USN-892-1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"USN-892-1: FUSE vulnerability | Ubuntu","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/55945","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/55945","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/38437","name":"http://secunia.com/advisories/38437","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Debian update for fuse - Advisories - Community","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034580.html","name":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034580.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"[SECURITY] Fedora 12 Update: fuse-2.8.1-4.fc12","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.debian.org/security/2010/dsa-1989","name":"http://www.debian.org/security/2010/dsa-1989","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"Debian -- Security Information -- DSA-1989-1 fuse","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/38287","name":"http://secunia.com/advisories/38287","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Fedora update for fuse - Advisories - Community","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://sourceforge.net/projects/fuse/files/fuse-2.X/2.7.5/fuse-2.7.5.tar.gz/download","name":"http://sourceforge.net/projects/fuse/files/fuse-2.X/2.7.5/fuse-2.7.5.tar.gz/download","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"Filesystem in Userspace -  Browse Files at SourceForge.net","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"http://sourceforge.net/projects/fuse/files/ReleaseNotes/fuse-2.8.3.html/view","name":"http://sourceforge.net/projects/fuse/files/ReleaseNotes/fuse-2.8.3.html/view","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Browse Filesystem in Userspace Files on SourceForge.net","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html","name":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"[security-announce] SUSE Security Summary Report: SUSE-SR:2010:011","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/38261","name":"http://secunia.com/advisories/38261","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"FUSE \"fusermount\" Race Condition Denial of Service - Advisories - Community","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00003.html","name":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00003.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"[security-announce] SUSE Security Summary Report: SUSE-SR:2010:003","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2010/1107","name":"http://www.vupen.com/english/advisories/2010/1107","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034518.html","name":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034518.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"[SECURITY] Fedora 11 Update: fuse-2.8.1-2.fc11","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/38359","name":"http://secunia.com/advisories/38359","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Ubuntu update for fuse - Advisories - Community","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-0789","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0789","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2010","cve_id":"789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fuse","cpe5":"fuse","cpe6":"1.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fuse","cpe5":"fuse","cpe6":"2.0","cpe7":"pre0","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fuse","cpe5":"fuse","cpe6":"2.0","cpe7":"pre1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fuse","cpe5":"fuse","cpe6":"2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fuse","cpe5":"fuse","cpe6":"2.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fuse","cpe5":"fuse","cpe6":"2.2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fuse","cpe5":"fuse","cpe6":"2.3","cpe7":"pre","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fuse","cpe5":"fuse","cpe6":"2.3","cpe7":"rc1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fuse","cpe5":"fuse","cpe6":"2.3.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fuse","cpe5":"fuse","cpe6":"2.4.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fuse","cpe5":"fuse","cpe6":"2.4.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fuse","cpe5":"fuse","cpe6":"2.4.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fuse","cpe5":"fuse","cpe6":"2.5.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fuse","cpe5":"fuse","cpe6":"2.5.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fuse","cpe5":"fuse","cpe6":"2.5.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fuse","cpe5":"fuse","cpe6":"2.5.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fuse","cpe5":"fuse","cpe6":"2.6.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fuse","cpe5":"fuse","cpe6":"2.6.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fuse","cpe5":"fuse","cpe6":"2.6.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fuse","cpe5":"fuse","cpe6":"2.6.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fuse","cpe5":"fuse","cpe6":"2.7.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fuse","cpe5":"fuse","cpe6":"2.7.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fuse","cpe5":"fuse","cpe6":"2.7.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fuse","cpe5":"fuse","cpe6":"2.7.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"789","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"fuse","cpe5":"fuse","cpe6":"2.7.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[{"cvename":"CVE-2010-0789","organization":"Red Hat","lastmodified":"2010-04-07","contributor":"Vincent Danen","statementText":"Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2010-0789 This issue affects Red Hat Enterprise Linux 5 because it ships fusermount suid root, however the impact of this flaw is minimized due to the fact that only members in group fuse may use it the executable is owned root:fuse and mode 4750. Red Hat Enterprise Linux 3 and 4 do not provide the fuse package. The Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here: http://www.redhat.com/security/updates/classification/","cve_year":"2010","cve_id":"789","crc32":"3fdee3b3"}],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T00:59:39.262Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://sourceforge.net/projects/fuse/files/ReleaseNotes/fuse-2.8.3.html/view"},{"name":"FEDORA-2010-1159","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"],"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034580.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567633"},{"name":"ADV-2010-1107","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2010/1107"},{"name":"DSA-1989","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"],"url":"http://www.debian.org/security/2010/dsa-1989"},{"name":"fuse-fusermount-dos(55945)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/55945"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=558833"},{"name":"SUSE-SR:2010:011","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html"},{"name":"SUSE-SR:2010:013","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"},{"name":"38261","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/38261"},{"name":"SUSE-SR:2010:003","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"],"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00003.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=532940"},{"name":"38359","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/38359"},{"name":"38287","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/38287"},{"name":"38437","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/38437"},{"name":"USN-892-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"http://www.ubuntu.com/usn/USN-892-1"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://sourceforge.net/projects/fuse/files/fuse-2.X/2.7.5/fuse-2.7.5.tar.gz/download"},{"name":"37983","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/37983"},{"name":"FEDORA-2010-1140","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"],"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034518.html"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2010-01-26T00:00:00.000Z","descriptions":[{"lang":"en","value":"fusermount in FUSE before 2.7.5, and 2.8.x before 2.8.2, allows local users to unmount an arbitrary FUSE filesystem share via a symlink attack on a mountpoint."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-16T14:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"http://sourceforge.net/projects/fuse/files/ReleaseNotes/fuse-2.8.3.html/view"},{"name":"FEDORA-2010-1159","tags":["vendor-advisory","x_refsource_FEDORA"],"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034580.html"},{"tags":["x_refsource_CONFIRM"],"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567633"},{"name":"ADV-2010-1107","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2010/1107"},{"name":"DSA-1989","tags":["vendor-advisory","x_refsource_DEBIAN"],"url":"http://www.debian.org/security/2010/dsa-1989"},{"name":"fuse-fusermount-dos(55945)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/55945"},{"tags":["x_refsource_CONFIRM"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=558833"},{"name":"SUSE-SR:2010:011","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html"},{"name":"SUSE-SR:2010:013","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"},{"name":"38261","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/38261"},{"name":"SUSE-SR:2010:003","tags":["vendor-advisory","x_refsource_SUSE"],"url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00003.html"},{"tags":["x_refsource_CONFIRM"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=532940"},{"name":"38359","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/38359"},{"name":"38287","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/38287"},{"name":"38437","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/38437"},{"name":"USN-892-1","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"http://www.ubuntu.com/usn/USN-892-1"},{"tags":["x_refsource_CONFIRM"],"url":"http://sourceforge.net/projects/fuse/files/fuse-2.X/2.7.5/fuse-2.7.5.tar.gz/download"},{"name":"37983","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/37983"},{"name":"FEDORA-2010-1140","tags":["vendor-advisory","x_refsource_FEDORA"],"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034518.html"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2010-0789","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"fusermount in FUSE before 2.7.5, and 2.8.x before 2.8.2, allows local users to unmount an arbitrary FUSE filesystem share via a symlink attack on a mountpoint."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://sourceforge.net/projects/fuse/files/ReleaseNotes/fuse-2.8.3.html/view","refsource":"CONFIRM","url":"http://sourceforge.net/projects/fuse/files/ReleaseNotes/fuse-2.8.3.html/view"},{"name":"FEDORA-2010-1159","refsource":"FEDORA","url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034580.html"},{"name":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567633","refsource":"CONFIRM","url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567633"},{"name":"ADV-2010-1107","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2010/1107"},{"name":"DSA-1989","refsource":"DEBIAN","url":"http://www.debian.org/security/2010/dsa-1989"},{"name":"fuse-fusermount-dos(55945)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/55945"},{"name":"https://bugzilla.redhat.com/show_bug.cgi?id=558833","refsource":"CONFIRM","url":"https://bugzilla.redhat.com/show_bug.cgi?id=558833"},{"name":"SUSE-SR:2010:011","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html"},{"name":"SUSE-SR:2010:013","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"},{"name":"38261","refsource":"SECUNIA","url":"http://secunia.com/advisories/38261"},{"name":"SUSE-SR:2010:003","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00003.html"},{"name":"https://bugzilla.redhat.com/show_bug.cgi?id=532940","refsource":"CONFIRM","url":"https://bugzilla.redhat.com/show_bug.cgi?id=532940"},{"name":"38359","refsource":"SECUNIA","url":"http://secunia.com/advisories/38359"},{"name":"38287","refsource":"SECUNIA","url":"http://secunia.com/advisories/38287"},{"name":"38437","refsource":"SECUNIA","url":"http://secunia.com/advisories/38437"},{"name":"USN-892-1","refsource":"UBUNTU","url":"http://www.ubuntu.com/usn/USN-892-1"},{"name":"http://sourceforge.net/projects/fuse/files/fuse-2.X/2.7.5/fuse-2.7.5.tar.gz/download","refsource":"CONFIRM","url":"http://sourceforge.net/projects/fuse/files/fuse-2.X/2.7.5/fuse-2.7.5.tar.gz/download"},{"name":"37983","refsource":"BID","url":"http://www.securityfocus.com/bid/37983"},{"name":"FEDORA-2010-1140","refsource":"FEDORA","url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034518.html"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2010-0789","datePublished":"2010-03-02T18:00:00.000Z","dateReserved":"2010-03-02T00:00:00.000Z","dateUpdated":"2024-08-07T00:59:39.262Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2010-03-02 18:30:01","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-59","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:P/A:P","baseScore":3.3,"accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fuse:fuse:1.9:*:*:*:*:*:*:*","matchCriteriaId":"55969766-1B53-4987-BED1-69210D870159"},{"vulnerable":true,"criteria":"cpe:2.3:a:fuse:fuse:2.0:pre0:*:*:*:*:*:*","matchCriteriaId":"975404B1-A1D7-498E-BCAF-27F6F0C6D6DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:fuse:fuse:2.0:pre1:*:*:*:*:*:*","matchCriteriaId":"725C66E7-CDE5-447F-A718-1F8E09DBD03B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fuse:fuse:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D694A371-E110-404C-8A8B-E162BE7CC420"},{"vulnerable":true,"criteria":"cpe:2.3:a:fuse:fuse:2.2:*:*:*:*:*:*:*","matchCriteriaId":"57EA26ED-6A5B-46FD-B776-56164C2CA2A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:fuse:fuse:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4070A046-AFAF-47E7-8143-950E7113F7D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fuse:fuse:2.3:pre:*:*:*:*:*:*","matchCriteriaId":"F58FB896-AC2F-44F6-B225-6B1E8B5D5AAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:fuse:fuse:2.3:rc1:*:*:*:*:*:*","matchCriteriaId":"046B9EE6-597B-4668-A7E3-3B2E19F2F1F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fuse:fuse:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"7F6E73A6-7598-43D0-85B6-36854D241753"},{"vulnerable":true,"criteria":"cpe:2.3:a:fuse:fuse:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"5C84298D-29DA-4E25-872C-C01123DC264B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fuse:fuse:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"79145A4A-180B-4A01-9B27-FF41C80C8A2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:fuse:fuse:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"B8FB5A17-317D-4FCD-9135-7B6FBFF43122"},{"vulnerable":true,"criteria":"cpe:2.3:a:fuse:fuse:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"86127064-585A-491A-9C02-3868293287E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:fuse:fuse:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D9AFE150-9202-478D-B9A5-A06631A7F654"},{"vulnerable":true,"criteria":"cpe:2.3:a:fuse:fuse:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"A203B9AA-AC5A-4F97-8B22-FD4CE9A5E9E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:fuse:fuse:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D88FC4B0-D669-4B8C-9F0E-8B40FD269707"},{"vulnerable":true,"criteria":"cpe:2.3:a:fuse:fuse:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"C58DA611-5C3C-48B5-9A97-AF61E79C2A11"},{"vulnerable":true,"criteria":"cpe:2.3:a:fuse:fuse:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"745A4F8C-CB3C-40CF-9358-89403CDAC064"},{"vulnerable":true,"criteria":"cpe:2.3:a:fuse:fuse:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"DA50E0DD-E42D-4A6B-A2D1-5EB5E032A3D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fuse:fuse:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"166EEDD0-41AC-48F6-BB41-2199E07D70C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:fuse:fuse:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"55B8E8CD-A4C9-4542-BA8E-6A59352225F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fuse:fuse:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"3168CEE0-DCB6-48DC-B1A1-A7A24E0D4455"},{"vulnerable":true,"criteria":"cpe:2.3:a:fuse:fuse:2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"553EBB29-A227-428F-A752-BDFB100C954D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fuse:fuse:2.7.3:*:*:*:*:*:*:*","matchCriteriaId":"55859957-F60A-452F-B41F-1C08ABA073A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:fuse:fuse:2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"7E20A7A1-54C5-427C-8232-E4E8CCB16AC4"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2010","CveId":"789","Ordinal":"1","Title":"CVE-2010-0789","CVE":"CVE-2010-0789","Year":"2010"},"notes":[{"CveYear":"2010","CveId":"789","Ordinal":"1","NoteData":"fusermount in FUSE before 2.7.5, and 2.8.x before 2.8.2, allows local users to unmount an arbitrary FUSE filesystem share via a symlink attack on a mountpoint.","Type":"Description","Title":"CVE-2010-0789"},{"CveYear":"2010","CveId":"789","Ordinal":"2","NoteData":"2010-03-02","Type":"Other","Title":"Published"},{"CveYear":"2010","CveId":"789","Ordinal":"3","NoteData":"2017-08-16","Type":"Other","Title":"Modified"}]}}}