FUSE 'fusermount' Race Condition Vulnerability

Bugtraq ID:	37983
Class:	Race Condition Error
CVE:	CVE-2009-3297 CVE-2010-0789
Remote:	No
Local:	Yes
Published:	Jan 27 2010 12:00AM
Updated:	Apr 13 2015 09:37PM
Credit:	Dan Rosenberg
Vulnerable:	Ubuntu Ubuntu Linux 9.10 sparc Ubuntu Ubuntu Linux 9.10 powerpc Ubuntu Ubuntu Linux 9.10 lpia Ubuntu Ubuntu Linux 9.10 i386 Ubuntu Ubuntu Linux 9.10 ARM Ubuntu Ubuntu Linux 9.10 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 10.10 powerpc Ubuntu Ubuntu Linux 10.10 i386 Ubuntu Ubuntu Linux 10.10 ARM Ubuntu Ubuntu Linux 10.10 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 SuSE SUSE Linux Enterprise SDK 10 SuSE Suse Linux Enterprise Desktop 10 SuSE SUSE Linux Enterprise 11 SuSE SUSE Linux Enterprise 10 SP3 SuSE SUSE Linux Enterprise 10 SP2 SuSE Moblin 2.1 SuSE Moblin 2.0 S.u.S.E. openSUSE 11.2 S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0 Redhat Enterprise Linux 5 Server Pardus Linux 2009 0 Miklos Szeredi FUSE 0 Mandriva Linux Mandrake 2010.0 x86_64 Mandriva Linux Mandrake 2010.0 Mandriva Linux Mandrake 2009.1 x86_64 Mandriva Linux Mandrake 2009.1 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 armel Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0
Not Vulnerable:

FUSE 'fusermount' Race Condition Vulnerability

FUSE is prone to a race-condition vulnerability.

A local attacker can exploit this issue to cause a denial of service via symlink attacks involving FUSE shares belonging to privileged users.

NOTE: For an exploit to succeed, the attacker must be a member of the 'fuse' group.

FUSE 'fusermount' Race Condition Vulnerability

Attackers can use standard commands to exploit this issue.

FUSE 'fusermount' Race Condition Vulnerability

Solution:
Updates are available. Please see the references for more information.


Ubuntu Ubuntu Linux 9.10 sparc

• Ubuntu fuse-utils-udeb_2.7.4-1.1ubuntu4.5_sparc.udeb
  http://ports.ubuntu.com/pool/main/f/fuse/fuse-utils-udeb_2.7.4-1.1ubun tu4.5_sparc.udeb


• Ubuntu fuse-utils_2.7.4-1.1ubuntu4.5_sparc.deb
  http://ports.ubuntu.com/pool/main/f/fuse/fuse-utils_2.7.4-1.1ubuntu4.5 _sparc.deb


• Ubuntu libfuse-dev_2.7.4-1.1ubuntu4.5_sparc.deb
  http://ports.ubuntu.com/pool/main/f/fuse/libfuse-dev_2.7.4-1.1ubuntu4. 5_sparc.deb


• Ubuntu libfuse2-udeb_2.7.4-1.1ubuntu4.5_sparc.udeb
  http://ports.ubuntu.com/pool/main/f/fuse/libfuse2-udeb_2.7.4-1.1ubuntu 4.5_sparc.udeb


• Ubuntu libfuse2_2.7.4-1.1ubuntu4.5_sparc.deb
  http://ports.ubuntu.com/pool/main/f/fuse/libfuse2_2.7.4-1.1ubuntu4.5_s parc.deb

Debian Linux 5.0 ia-64

• Debian fuse-utils_2.7.4-1.1+lenny1_ia64.deb
  http://security.debian.org/pool/updates/main/f/fuse/fuse-utils_2.7.4-1 .1+lenny1_ia64.deb


• Debian libfuse-dev_2.7.4-1.1+lenny1_ia64.deb
  http://security.debian.org/pool/updates/main/f/fuse/libfuse-dev_2.7.4- 1.1+lenny1_ia64.deb


• Debian libfuse2_2.7.4-1.1+lenny1_ia64.deb
  http://security.debian.org/pool/updates/main/f/fuse/libfuse2_2.7.4-1.1 +lenny1_ia64.deb

Ubuntu Ubuntu Linux 8.04 LTS powerpc

• Ubuntu fuse-source_2.7.2-1ubuntu2.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/f/fuse/fuse-source_2.7 .2-1ubuntu2.3_all.deb


• Ubuntu fuse-utils-udeb_2.7.2-1ubuntu2.3_powerpc.udeb
  http://ports.ubuntu.com/pool/main/f/fuse/fuse-utils-udeb_2.7.2-1ubuntu 2.3_powerpc.udeb


• Ubuntu fuse-utils_2.7.2-1ubuntu2.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/f/fuse/fuse-utils_2.7.2-1ubuntu2.3_p owerpc.deb


• Ubuntu libfuse-dev_2.7.2-1ubuntu2.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/f/fuse/libfuse-dev_2.7.2-1ubuntu2.3_ powerpc.deb


• Ubuntu libfuse2-udeb_2.7.2-1ubuntu2.3_powerpc.udeb
  http://ports.ubuntu.com/pool/main/f/fuse/libfuse2-udeb_2.7.2-1ubuntu2. 3_powerpc.udeb


• Ubuntu libfuse2_2.7.2-1ubuntu2.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/f/fuse/libfuse2_2.7.2-1ubuntu2.3_pow erpc.deb

Ubuntu Ubuntu Linux 8.04 LTS sparc

• Ubuntu fuse-source_2.7.2-1ubuntu2.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/f/fuse/fuse-source_2.7 .2-1ubuntu2.3_all.deb


• Ubuntu fuse-utils-udeb_2.7.2-1ubuntu2.3_sparc.udeb
  http://ports.ubuntu.com/pool/main/f/fuse/fuse-utils-udeb_2.7.2-1ubuntu 2.3_sparc.udeb


• Ubuntu fuse-utils_2.7.2-1ubuntu2.3_sparc.deb
  http://ports.ubuntu.com/pool/main/f/fuse/fuse-utils_2.7.2-1ubuntu2.3_s parc.deb


• Ubuntu libfuse-dev_2.7.2-1ubuntu2.3_sparc.deb
  http://ports.ubuntu.com/pool/main/f/fuse/libfuse-dev_2.7.2-1ubuntu2.3_ sparc.deb


• Ubuntu libfuse2-udeb_2.7.2-1ubuntu2.3_sparc.udeb
  http://ports.ubuntu.com/pool/main/f/fuse/libfuse2-udeb_2.7.2-1ubuntu2. 3_sparc.udeb


• Ubuntu libfuse2_2.7.2-1ubuntu2.3_sparc.deb
  http://ports.ubuntu.com/pool/main/f/fuse/libfuse2_2.7.2-1ubuntu2.3_spa rc.deb

Ubuntu Ubuntu Linux 9.10 powerpc

• Ubuntu fuse-utils-udeb_2.7.4-1.1ubuntu4.5_powerpc.udeb
  http://ports.ubuntu.com/pool/main/f/fuse/fuse-utils-udeb_2.7.4-1.1ubun tu4.5_powerpc.udeb


• Ubuntu fuse-utils_2.7.4-1.1ubuntu4.5_powerpc.deb
  http://ports.ubuntu.com/pool/main/f/fuse/fuse-utils_2.7.4-1.1ubuntu4.5 _powerpc.deb


• Ubuntu libfuse-dev_2.7.4-1.1ubuntu4.5_powerpc.deb
  http://ports.ubuntu.com/pool/main/f/fuse/libfuse-dev_2.7.4-1.1ubuntu4. 5_powerpc.deb


• Ubuntu libfuse2-udeb_2.7.4-1.1ubuntu4.5_powerpc.udeb
  http://ports.ubuntu.com/pool/main/f/fuse/libfuse2-udeb_2.7.4-1.1ubuntu 4.5_powerpc.udeb


• Ubuntu libfuse2_2.7.4-1.1ubuntu4.5_powerpc.deb
  http://ports.ubuntu.com/pool/main/f/fuse/libfuse2_2.7.4-1.1ubuntu4.5_p owerpc.deb

Debian Linux 5.0 alpha

• Debian fuse-utils_2.7.4-1.1+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/f/fuse/fuse-utils_2.7.4-1 .1+lenny1_alpha.deb


• Debian libfuse-dev_2.7.4-1.1+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/f/fuse/libfuse-dev_2.7.4- 1.1+lenny1_alpha.deb


• Debian libfuse2_2.7.4-1.1+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/f/fuse/libfuse2_2.7.4-1.1 +lenny1_alpha.deb

Ubuntu Ubuntu Linux 8.04 LTS amd64

• Ubuntu fuse-source_2.7.2-1ubuntu2.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/f/fuse/fuse-source_2.7 .2-1ubuntu2.3_all.deb


• Ubuntu fuse-utils-udeb_2.7.2-1ubuntu2.3_amd64.udeb
  http://security.ubuntu.com/ubuntu/pool/main/f/fuse/fuse-utils-udeb_2.7 .2-1ubuntu2.3_amd64.udeb


• Ubuntu fuse-utils_2.7.2-1ubuntu2.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/f/fuse/fuse-utils_2.7.2-1u buntu2.3_amd64.deb


• Ubuntu libfuse-dev_2.7.2-1ubuntu2.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/f/fuse/libfuse-dev_2.7.2-1 ubuntu2.3_amd64.deb


• Ubuntu libfuse2-udeb_2.7.2-1ubuntu2.3_amd64.udeb
  http://security.ubuntu.com/ubuntu/pool/main/f/fuse/libfuse2-udeb_2.7.2 -1ubuntu2.3_amd64.udeb


• Ubuntu libfuse2_2.7.2-1ubuntu2.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/f/fuse/libfuse2_2.7.2-1ubu ntu2.3_amd64.deb

Ubuntu Ubuntu Linux 9.10 lpia

• Ubuntu fuse-utils-udeb_2.7.4-1.1ubuntu4.5_lpia.udeb
  http://ports.ubuntu.com/pool/main/f/fuse/fuse-utils-udeb_2.7.4-1.1ubun tu4.5_lpia.udeb


• Ubuntu fuse-utils_2.7.4-1.1ubuntu4.5_lpia.deb
  http://ports.ubuntu.com/pool/main/f/fuse/fuse-utils_2.7.4-1.1ubuntu4.5 _lpia.deb


• Ubuntu libfuse-dev_2.7.4-1.1ubuntu4.5_lpia.deb
  http://ports.ubuntu.com/pool/main/f/fuse/libfuse-dev_2.7.4-1.1ubuntu4. 5_lpia.deb


• Ubuntu libfuse2-udeb_2.7.4-1.1ubuntu4.5_lpia.udeb
  http://ports.ubuntu.com/pool/main/f/fuse/libfuse2-udeb_2.7.4-1.1ubuntu 4.5_lpia.udeb


• Ubuntu libfuse2_2.7.4-1.1ubuntu4.5_lpia.deb
  http://ports.ubuntu.com/pool/main/f/fuse/libfuse2_2.7.4-1.1ubuntu4.5_l pia.deb

Debian Linux 5.0 mipsel

• Debian fuse-utils_2.7.4-1.1+lenny1_mipsel.deb
  http://security.debian.org/pool/updates/main/f/fuse/fuse-utils_2.7.4-1 .1+lenny1_mipsel.deb


• Debian libfuse-dev_2.7.4-1.1+lenny1_mipsel.deb
  http://security.debian.org/pool/updates/main/f/fuse/libfuse-dev_2.7.4- 1.1+lenny1_mipsel.deb


• Debian libfuse2_2.7.4-1.1+lenny1_mipsel.deb
  http://security.debian.org/pool/updates/main/f/fuse/libfuse2_2.7.4-1.1 +lenny1_mipsel.deb

Debian Linux 4.0 amd64

• Debian fuse-utils_2.5.3-4.4+etch1_amd64.deb
  http://security.debian.org/pool/updates/main/f/fuse/fuse-utils_2.5.3-4 .4+etch1_amd64.deb


• Debian libfuse-dev_2.5.3-4.4+etch1_amd64.deb
  http://security.debian.org/pool/updates/main/f/fuse/libfuse-dev_2.5.3- 4.4+etch1_amd64.deb


• Debian libfuse2_2.5.3-4.4+etch1_amd64.deb
  http://security.debian.org/pool/updates/main/f/fuse/libfuse2_2.5.3-4.4 +etch1_amd64.deb

Ubuntu Ubuntu Linux 10.10 amd64

• Ubuntu fuse-utils-udeb_2.8.4-1ubuntu1.3_amd64.udeb
  http://security.ubuntu.com/ubuntu/pool/main/f/fuse/fuse-utils-udeb_2.8 .4-1ubuntu1.3_amd64.udeb


• Ubuntu fuse-utils_2.8.4-1ubuntu1.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/f/fuse/fuse-utils_2.8.4-1u buntu1.3_amd64.deb


• Ubuntu libfuse-dev_2.8.4-1ubuntu1.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/f/fuse/libfuse-dev_2.8.4-1 ubuntu1.3_amd64.deb


• Ubuntu libfuse2-udeb_2.8.4-1ubuntu1.3_amd64.udeb
  http://security.ubuntu.com/ubuntu/pool/main/f/fuse/libfuse2-udeb_2.8.4 -1ubuntu1.3_amd64.udeb


• Ubuntu libfuse2_2.8.4-1ubuntu1.3_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/f/fuse/libfuse2_2.8.4-1ubu ntu1.3_amd64.deb

Debian Linux 4.0 ia-32

• Debian fuse-utils_2.5.3-4.4+etch1_i386.deb
  http://security.debian.org/pool/updates/main/f/fuse/fuse-utils_2.5.3-4 .4+etch1_i386.deb


• Debian libfuse-dev_2.5.3-4.4+etch1_i386.deb
  http://security.debian.org/pool/updates/main/f/fuse/libfuse-dev_2.5.3- 4.4+etch1_i386.deb


• Debian libfuse2_2.5.3-4.4+etch1_i386.deb
  http://security.debian.org/pool/updates/main/f/fuse/libfuse2_2.5.3-4.4 +etch1_i386.deb

Ubuntu Ubuntu Linux 10.04 powerpc

• Ubuntu fuse-utils-udeb_2.8.1-1.1ubuntu3.1_powerpc.udeb
  http://ports.ubuntu.com/pool/main/f/fuse/fuse-utils-udeb_2.8.1-1.1ubun tu3.1_powerpc.udeb


• Ubuntu fuse-utils_2.8.1-1.1ubuntu3.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/f/fuse/fuse-utils_2.8.1-1.1ubuntu3.1 _powerpc.deb


• Ubuntu libfuse-dev_2.8.1-1.1ubuntu3.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/f/fuse/libfuse-dev_2.8.1-1.1ubuntu3. 1_powerpc.deb


• Ubuntu libfuse2-udeb_2.8.1-1.1ubuntu3.1_powerpc.udeb
  http://ports.ubuntu.com/pool/main/f/fuse/libfuse2-udeb_2.8.1-1.1ubuntu 3.1_powerpc.udeb


• Ubuntu libfuse2_2.8.1-1.1ubuntu3.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/f/fuse/libfuse2_2.8.1-1.1ubuntu3.1_p owerpc.deb

Debian Linux 4.0 hppa

• Debian fuse-utils_2.5.3-4.4+etch1_hppa.deb
  http://security.debian.org/pool/updates/main/f/fuse/fuse-utils_2.5.3-4 .4+etch1_hppa.deb


• Debian libfuse-dev_2.5.3-4.4+etch1_hppa.deb
  http://security.debian.org/pool/updates/main/f/fuse/libfuse-dev_2.5.3- 4.4+etch1_hppa.deb


• Debian libfuse2_2.5.3-4.4+etch1_hppa.deb
  http://security.debian.org/pool/updates/main/f/fuse/libfuse2_2.5.3-4.4 +etch1_hppa.deb

Ubuntu Ubuntu Linux 9.10 i386

• Ubuntu fuse-utils-udeb_2.7.4-1.1ubuntu4.5_i386.udeb
  http://security.ubuntu.com/ubuntu/pool/main/f/fuse/fuse-utils-udeb_2.7 .4-1.1ubuntu4.5_i386.udeb


• Ubuntu fuse-utils_2.7.4-1.1ubuntu4.5_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/f/fuse/fuse-utils_2.7.4-1. 1ubuntu4.5_i386.deb


• Ubuntu libfuse-dev_2.7.4-1.1ubuntu4.5_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/f/fuse/libfuse-dev_2.7.4-1 .1ubuntu4.5_i386.deb


• Ubuntu libfuse2-udeb_2.7.4-1.1ubuntu4.5_i386.udeb
  http://security.ubuntu.com/ubuntu/pool/main/f/fuse/libfuse2-udeb_2.7.4 -1.1ubuntu4.5_i386.udeb


• Ubuntu libfuse2_2.7.4-1.1ubuntu4.5_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/f/fuse/libfuse2_2.7.4-1.1u buntu4.5_i386.deb

Ubuntu Ubuntu Linux 10.04 amd64

• Ubuntu fuse-utils-udeb_2.8.1-1.1ubuntu3.1_amd64.udeb
  http://security.ubuntu.com/ubuntu/pool/main/f/fuse/fuse-utils-udeb_2.8 .1-1.1ubuntu3.1_amd64.udeb


• Ubuntu fuse-utils_2.8.1-1.1ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/f/fuse/fuse-utils_2.8.1-1. 1ubuntu3.1_amd64.deb


• Ubuntu libfuse-dev_2.8.1-1.1ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/f/fuse/libfuse-dev_2.8.1-1 .1ubuntu3.1_amd64.deb


• Ubuntu libfuse2-udeb_2.8.1-1.1ubuntu3.1_amd64.udeb
  http://security.ubuntu.com/ubuntu/pool/main/f/fuse/libfuse2-udeb_2.8.1 -1.1ubuntu3.1_amd64.udeb


• Ubuntu libfuse2_2.8.1-1.1ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/f/fuse/libfuse2_2.8.1-1.1u buntu3.1_amd64.deb

Debian Linux 5.0 armel

• Debian fuse-utils_2.7.4-1.1+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/f/fuse/fuse-utils_2.7.4-1 .1+lenny1_armel.deb


• Debian libfuse-dev_2.7.4-1.1+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/f/fuse/libfuse-dev_2.7.4- 1.1+lenny1_armel.deb


• Debian libfuse2_2.7.4-1.1+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/f/fuse/libfuse2_2.7.4-1.1 +lenny1_armel.deb

Ubuntu Ubuntu Linux 9.10 ARM

• Ubuntu fuse-utils-udeb_2.7.4-1.1ubuntu4.5_armel.udeb
  http://ports.ubuntu.com/pool/main/f/fuse/fuse-utils-udeb_2.7.4-1.1ubun tu4.5_armel.udeb


• Ubuntu fuse-utils_2.7.4-1.1ubuntu4.5_armel.deb
  http://ports.ubuntu.com/pool/main/f/fuse/fuse-utils_2.7.4-1.1ubuntu4.5 _armel.deb


• Ubuntu libfuse-dev_2.7.4-1.1ubuntu4.5_armel.deb
  http://ports.ubuntu.com/pool/main/f/fuse/libfuse-dev_2.7.4-1.1ubuntu4. 5_armel.deb


• Ubuntu libfuse2-udeb_2.7.4-1.1ubuntu4.5_armel.udeb
  http://ports.ubuntu.com/pool/main/f/fuse/libfuse2-udeb_2.7.4-1.1ubuntu 4.5_armel.udeb


• Ubuntu libfuse2_2.7.4-1.1ubuntu4.5_armel.deb
  http://ports.ubuntu.com/pool/main/f/fuse/libfuse2_2.7.4-1.1ubuntu4.5_a rmel.deb

Ubuntu Ubuntu Linux 9.10 amd64

• Ubuntu fuse-utils-udeb_2.7.4-1.1ubuntu4.5_amd64.udeb
  http://security.ubuntu.com/ubuntu/pool/main/f/fuse/fuse-utils-udeb_2.7 .4-1.1ubuntu4.5_amd64.udeb


• Ubuntu fuse-utils_2.7.4-1.1ubuntu4.5_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/f/fuse/fuse-utils_2.7.4-1. 1ubuntu4.5_amd64.deb


• Ubuntu libfuse-dev_2.7.4-1.1ubuntu4.5_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/f/fuse/libfuse-dev_2.7.4-1 .1ubuntu4.5_amd64.deb


• Ubuntu libfuse2-udeb_2.7.4-1.1ubuntu4.5_amd64.udeb
  http://security.ubuntu.com/ubuntu/pool/main/f/fuse/libfuse2-udeb_2.7.4 -1.1ubuntu4.5_amd64.udeb


• Ubuntu libfuse2_2.7.4-1.1ubuntu4.5_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/f/fuse/libfuse2_2.7.4-1.1u buntu4.5_amd64.deb

Debian Linux 4.0 mipsel

• Debian fuse-utils_2.5.3-4.4+etch1_mipsel.deb
  http://security.debian.org/pool/updates/main/f/fuse/fuse-utils_2.5.3-4 .4+etch1_mipsel.deb


• Debian libfuse-dev_2.5.3-4.4+etch1_mipsel.deb
  http://security.debian.org/pool/updates/main/f/fuse/libfuse-dev_2.5.3- 4.4+etch1_mipsel.deb


• Debian libfuse2_2.5.3-4.4+etch1_mipsel.deb
  http://security.debian.org/pool/updates/main/f/fuse/libfuse2_2.5.3-4.4 +etch1_mipsel.deb

Ubuntu Ubuntu Linux 10.04 ARM

• Ubuntu fuse-utils-udeb_2.8.1-1.1ubuntu3.1_armel.udeb
  http://ports.ubuntu.com/pool/main/f/fuse/fuse-utils-udeb_2.8.1-1.1ubun tu3.1_armel.udeb


• Ubuntu fuse-utils_2.8.1-1.1ubuntu3.1_armel.deb
  http://ports.ubuntu.com/pool/main/f/fuse/fuse-utils_2.8.1-1.1ubuntu3.1 _armel.deb


• Ubuntu libfuse-dev_2.8.1-1.1ubuntu3.1_armel.deb
  http://ports.ubuntu.com/pool/main/f/fuse/libfuse-dev_2.8.1-1.1ubuntu3. 1_armel.deb


• Ubuntu libfuse2-udeb_2.8.1-1.1ubuntu3.1_armel.udeb
  http://ports.ubuntu.com/pool/main/f/fuse/libfuse2-udeb_2.8.1-1.1ubuntu 3.1_armel.udeb


• Ubuntu libfuse2_2.8.1-1.1ubuntu3.1_armel.deb
  http://ports.ubuntu.com/pool/main/f/fuse/libfuse2_2.8.1-1.1ubuntu3.1_a rmel.deb

Debian Linux 5.0 mips

• Debian fuse-utils_2.7.4-1.1+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/f/fuse/fuse-utils_2.7.4-1 .1+lenny1_mips.deb


• Debian libfuse-dev_2.7.4-1.1+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/f/fuse/libfuse-dev_2.7.4- 1.1+lenny1_mips.deb


• Debian libfuse2_2.7.4-1.1+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/f/fuse/libfuse2_2.7.4-1.1 +lenny1_mips.deb

Debian Linux 4.0 ia-64

• Debian fuse-utils_2.5.3-4.4+etch1_ia64.deb
  http://security.debian.org/pool/updates/main/f/fuse/fuse-utils_2.5.3-4 .4+etch1_ia64.deb


• Debian libfuse-dev_2.5.3-4.4+etch1_ia64.deb
  http://security.debian.org/pool/updates/main/f/fuse/libfuse-dev_2.5.3- 4.4+etch1_ia64.deb


• Debian libfuse2_2.5.3-4.4+etch1_ia64.deb
  http://security.debian.org/pool/updates/main/f/fuse/libfuse2_2.5.3-4.4 +etch1_ia64.deb

Debian Linux 5.0 sparc

• Debian fuse-utils_2.7.4-1.1+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/f/fuse/fuse-utils_2.7.4-1 .1+lenny1_sparc.deb


• Debian libfuse-dev_2.7.4-1.1+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/f/fuse/libfuse-dev_2.7.4- 1.1+lenny1_sparc.deb


• Debian libfuse2_2.7.4-1.1+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/f/fuse/libfuse2_2.7.4-1.1 +lenny1_sparc.deb

Ubuntu Ubuntu Linux 10.04 i386

• Ubuntu fuse-utils-udeb_2.8.1-1.1ubuntu3.1_i386.udeb
  http://security.ubuntu.com/ubuntu/pool/main/f/fuse/fuse-utils-udeb_2.8 .1-1.1ubuntu3.1_i386.udeb


• Ubuntu fuse-utils_2.8.1-1.1ubuntu3.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/f/fuse/fuse-utils_2.8.1-1. 1ubuntu3.1_i386.deb


• Ubuntu libfuse-dev_2.8.1-1.1ubuntu3.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/f/fuse/libfuse-dev_2.8.1-1 .1ubuntu3.1_i386.deb


• Ubuntu libfuse2-udeb_2.8.1-1.1ubuntu3.1_i386.udeb
  http://security.ubuntu.com/ubuntu/pool/main/f/fuse/libfuse2-udeb_2.8.1 -1.1ubuntu3.1_i386.udeb


• Ubuntu libfuse2_2.8.1-1.1ubuntu3.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/f/fuse/libfuse2_2.8.1-1.1u buntu3.1_i386.deb

Debian Linux 4.0 arm

• Debian fuse-utils_2.5.3-4.4+etch1_arm.deb
  http://security.debian.org/pool/updates/main/f/fuse/fuse-utils_2.5.3-4 .4+etch1_arm.deb


• Debian libfuse-dev_2.5.3-4.4+etch1_arm.deb
  http://security.debian.org/pool/updates/main/f/fuse/libfuse-dev_2.5.3- 4.4+etch1_arm.deb


• Debian libfuse2_2.5.3-4.4+etch1_arm.deb
  http://security.debian.org/pool/updates/main/f/fuse/libfuse2_2.5.3-4.4 +etch1_arm.deb

Debian Linux 4.0 powerpc

• Debian fuse-utils_2.5.3-4.4+etch1_powerpc.deb
  http://security.debian.org/pool/updates/main/f/fuse/fuse-utils_2.5.3-4 .4+etch1_powerpc.deb


• Debian libfuse-dev_2.5.3-4.4+etch1_powerpc.deb
  http://security.debian.org/pool/updates/main/f/fuse/libfuse-dev_2.5.3- 4.4+etch1_powerpc.deb


• Debian libfuse2_2.5.3-4.4+etch1_powerpc.deb
  http://security.debian.org/pool/updates/main/f/fuse/libfuse2_2.5.3-4.4 +etch1_powerpc.deb

Debian Linux 5.0 ia-32

• Debian fuse-utils_2.7.4-1.1+lenny1_i386.deb
  http://security.debian.org/pool/updates/main/f/fuse/fuse-utils_2.7.4-1 .1+lenny1_i386.deb


• Debian libfuse-dev_2.7.4-1.1+lenny1_i386.deb
  http://security.debian.org/pool/updates/main/f/fuse/libfuse-dev_2.7.4- 1.1+lenny1_i386.deb


• Debian libfuse2_2.7.4-1.1+lenny1_i386.deb
  http://security.debian.org/pool/updates/main/f/fuse/libfuse2_2.7.4-1.1 +lenny1_i386.deb

Ubuntu Ubuntu Linux 10.10 ARM

• Ubuntu fuse-utils-udeb_2.8.4-1ubuntu1.3_armel.udeb
  http://ports.ubuntu.com/pool/main/f/fuse/fuse-utils-udeb_2.8.4-1ubuntu 1.3_armel.udeb


• Ubuntu fuse-utils_2.8.4-1ubuntu1.3_armel.deb
  http://ports.ubuntu.com/pool/main/f/fuse/fuse-utils_2.8.4-1ubuntu1.3_a rmel.deb


• Ubuntu libfuse-dev_2.8.4-1ubuntu1.3_armel.deb
  http://ports.ubuntu.com/pool/main/f/fuse/libfuse-dev_2.8.4-1ubuntu1.3_ armel.deb


• Ubuntu libfuse2-udeb_2.8.4-1ubuntu1.3_armel.udeb
  http://ports.ubuntu.com/pool/main/f/fuse/libfuse2-udeb_2.8.4-1ubuntu1. 3_armel.udeb


• Ubuntu libfuse2_2.8.4-1ubuntu1.3_armel.deb
  http://ports.ubuntu.com/pool/main/f/fuse/libfuse2_2.8.4-1ubuntu1.3_arm el.deb

Debian Linux 5.0 s/390

• Debian fuse-utils_2.7.4-1.1+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/f/fuse/fuse-utils_2.7.4-1 .1+lenny1_s390.deb


• Debian libfuse-dev_2.7.4-1.1+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/f/fuse/libfuse-dev_2.7.4- 1.1+lenny1_s390.deb


• Debian libfuse2_2.7.4-1.1+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/f/fuse/libfuse2_2.7.4-1.1 +lenny1_s390.deb

Ubuntu Ubuntu Linux 8.04 LTS lpia

• Ubuntu fuse-source_2.7.2-1ubuntu2.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/f/fuse/fuse-source_2.7 .2-1ubuntu2.3_all.deb


• Ubuntu fuse-utils-udeb_2.7.2-1ubuntu2.3_lpia.udeb
  http://ports.ubuntu.com/pool/main/f/fuse/fuse-utils-udeb_2.7.2-1ubuntu 2.3_lpia.udeb


• Ubuntu fuse-utils_2.7.2-1ubuntu2.3_lpia.deb
  http://ports.ubuntu.com/pool/main/f/fuse/fuse-utils_2.7.2-1ubuntu2.3_l pia.deb


• Ubuntu libfuse-dev_2.7.2-1ubuntu2.3_lpia.deb
  http://ports.ubuntu.com/pool/main/f/fuse/libfuse-dev_2.7.2-1ubuntu2.3_ lpia.deb


• Ubuntu libfuse2-udeb_2.7.2-1ubuntu2.3_lpia.udeb
  http://ports.ubuntu.com/pool/main/f/fuse/libfuse2-udeb_2.7.2-1ubuntu2. 3_lpia.udeb


• Ubuntu libfuse2_2.7.2-1ubuntu2.3_lpia.deb
  http://ports.ubuntu.com/pool/main/f/fuse/libfuse2_2.7.2-1ubuntu2.3_lpi a.deb

Debian Linux 5.0 hppa

• Debian fuse-utils_2.7.4-1.1+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/f/fuse/fuse-utils_2.7.4-1 .1+lenny1_hppa.deb


• Debian libfuse-dev_2.7.4-1.1+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/f/fuse/libfuse-dev_2.7.4- 1.1+lenny1_hppa.deb


• Debian libfuse2_2.7.4-1.1+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/f/fuse/libfuse2_2.7.4-1.1 +lenny1_hppa.deb

Debian Linux 4.0 sparc

• Debian fuse-utils_2.5.3-4.4+etch1_sparc.deb
  http://security.debian.org/pool/updates/main/f/fuse/fuse-utils_2.5.3-4 .4+etch1_sparc.deb


• Debian libfuse-dev_2.5.3-4.4+etch1_sparc.deb
  http://security.debian.org/pool/updates/main/f/fuse/libfuse-dev_2.5.3- 4.4+etch1_sparc.deb


• Debian libfuse2_2.5.3-4.4+etch1_sparc.deb
  http://security.debian.org/pool/updates/main/f/fuse/libfuse2_2.5.3-4.4 +etch1_sparc.deb

Debian Linux 4.0 s/390

• Debian fuse-utils_2.5.3-4.4+etch1_s390.deb
  http://security.debian.org/pool/updates/main/f/fuse/fuse-utils_2.5.3-4 .4+etch1_s390.deb


• Debian libfuse-dev_2.5.3-4.4+etch1_s390.deb
  http://security.debian.org/pool/updates/main/f/fuse/libfuse-dev_2.5.3- 4.4+etch1_s390.deb


• Debian libfuse2_2.5.3-4.4+etch1_s390.deb
  http://security.debian.org/pool/updates/main/f/fuse/libfuse2_2.5.3-4.4 +etch1_s390.deb

Debian Linux 5.0 arm

• Debian fuse-utils_2.7.4-1.1+lenny1_arm.deb
  http://security.debian.org/pool/updates/main/f/fuse/fuse-utils_2.7.4-1 .1+lenny1_arm.deb


• Debian libfuse-dev_2.7.4-1.1+lenny1_arm.deb
  http://security.debian.org/pool/updates/main/f/fuse/libfuse-dev_2.7.4- 1.1+lenny1_arm.deb


• Debian libfuse2_2.7.4-1.1+lenny1_arm.deb
  http://security.debian.org/pool/updates/main/f/fuse/libfuse2_2.7.4-1.1 +lenny1_arm.deb

Ubuntu Ubuntu Linux 10.10 powerpc

• Ubuntu fuse-utils-udeb_2.8.4-1ubuntu1.3_powerpc.udeb
  http://ports.ubuntu.com/pool/main/f/fuse/fuse-utils-udeb_2.8.4-1ubuntu 1.3_powerpc.udeb


• Ubuntu fuse-utils_2.8.4-1ubuntu1.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/f/fuse/fuse-utils_2.8.4-1ubuntu1.3_p owerpc.deb


• Ubuntu libfuse-dev_2.8.4-1ubuntu1.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/f/fuse/libfuse-dev_2.8.4-1ubuntu1.3_ powerpc.deb


• Ubuntu libfuse2-udeb_2.8.4-1ubuntu1.3_powerpc.udeb
  http://ports.ubuntu.com/pool/main/f/fuse/libfuse2-udeb_2.8.4-1ubuntu1. 3_powerpc.udeb


• Ubuntu libfuse2_2.8.4-1ubuntu1.3_powerpc.deb
  http://ports.ubuntu.com/pool/main/f/fuse/libfuse2_2.8.4-1ubuntu1.3_pow erpc.deb

Debian Linux 4.0 alpha

• Debian fuse-utils_2.5.3-4.4+etch1_alpha.deb
  http://security.debian.org/pool/updates/main/f/fuse/fuse-utils_2.5.3-4 .4+etch1_alpha.deb


• Debian libfuse-dev_2.5.3-4.4+etch1_alpha.deb
  http://security.debian.org/pool/updates/main/f/fuse/libfuse-dev_2.5.3- 4.4+etch1_alpha.deb


• Debian libfuse2_2.5.3-4.4+etch1_alpha.deb
  http://security.debian.org/pool/updates/main/f/fuse/libfuse2_2.5.3-4.4 +etch1_alpha.deb

Ubuntu Ubuntu Linux 8.04 LTS i386

• Ubuntu fuse-source_2.7.2-1ubuntu2.3_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/f/fuse/fuse-source_2.7 .2-1ubuntu2.3_all.deb


• Ubuntu fuse-utils-udeb_2.7.2-1ubuntu2.3_i386.udeb
  http://security.ubuntu.com/ubuntu/pool/main/f/fuse/fuse-utils-udeb_2.7 .2-1ubuntu2.3_i386.udeb


• Ubuntu fuse-utils_2.7.2-1ubuntu2.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/f/fuse/fuse-utils_2.7.2-1u buntu2.3_i386.deb


• Ubuntu libfuse-dev_2.7.2-1ubuntu2.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/f/fuse/libfuse-dev_2.7.2-1 ubuntu2.3_i386.deb


• Ubuntu libfuse2-udeb_2.7.2-1ubuntu2.3_i386.udeb
  http://security.ubuntu.com/ubuntu/pool/main/f/fuse/libfuse2-udeb_2.7.2 -1ubuntu2.3_i386.udeb


• Ubuntu libfuse2_2.7.2-1ubuntu2.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/f/fuse/libfuse2_2.7.2-1ubu ntu2.3_i386.deb

Debian Linux 5.0 amd64

• Debian fuse-utils_2.7.4-1.1+lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/f/fuse/fuse-utils_2.7.4-1 .1+lenny1_amd64.deb


• Debian libfuse-dev_2.7.4-1.1+lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/f/fuse/libfuse-dev_2.7.4- 1.1+lenny1_amd64.deb


• Debian libfuse2_2.7.4-1.1+lenny1_amd64.deb
  http://security.debian.org/pool/updates/main/f/fuse/libfuse2_2.7.4-1.1 +lenny1_amd64.deb

Ubuntu Ubuntu Linux 10.10 i386

• Ubuntu fuse-utils-udeb_2.8.4-1ubuntu1.3_i386.udeb
  http://security.ubuntu.com/ubuntu/pool/main/f/fuse/fuse-utils-udeb_2.8 .4-1ubuntu1.3_i386.udeb


• Ubuntu fuse-utils_2.8.4-1ubuntu1.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/f/fuse/fuse-utils_2.8.4-1u buntu1.3_i386.deb


• Ubuntu libfuse-dev_2.8.4-1ubuntu1.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/f/fuse/libfuse-dev_2.8.4-1 ubuntu1.3_i386.deb


• Ubuntu libfuse2-udeb_2.8.4-1ubuntu1.3_i386.udeb
  http://security.ubuntu.com/ubuntu/pool/main/f/fuse/libfuse2-udeb_2.8.4 -1ubuntu1.3_i386.udeb


• Ubuntu libfuse2_2.8.4-1ubuntu1.3_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/f/fuse/libfuse2_2.8.4-1ubu ntu1.3_i386.deb

Ubuntu Ubuntu Linux 10.04 sparc

• Ubuntu fuse-utils-udeb_2.8.1-1.1ubuntu3.1_sparc.udeb
  http://ports.ubuntu.com/pool/main/f/fuse/fuse-utils-udeb_2.8.1-1.1ubun tu3.1_sparc.udeb


• Ubuntu fuse-utils_2.8.1-1.1ubuntu3.1_sparc.deb
  http://ports.ubuntu.com/pool/main/f/fuse/fuse-utils_2.8.1-1.1ubuntu3.1 _sparc.deb


• Ubuntu libfuse-dev_2.8.1-1.1ubuntu3.1_sparc.deb
  http://ports.ubuntu.com/pool/main/f/fuse/libfuse-dev_2.8.1-1.1ubuntu3. 1_sparc.deb


• Ubuntu libfuse2-udeb_2.8.1-1.1ubuntu3.1_sparc.udeb
  http://ports.ubuntu.com/pool/main/f/fuse/libfuse2-udeb_2.8.1-1.1ubuntu 3.1_sparc.udeb


• Ubuntu libfuse2_2.8.1-1.1ubuntu3.1_sparc.deb
  http://ports.ubuntu.com/pool/main/f/fuse/libfuse2_2.8.1-1.1ubuntu3.1_s parc.deb

Debian Linux 5.0 powerpc

• Debian fuse-utils_2.7.4-1.1+lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/f/fuse/fuse-utils_2.7.4-1 .1+lenny1_powerpc.deb


• Debian libfuse-dev_2.7.4-1.1+lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/f/fuse/libfuse-dev_2.7.4- 1.1+lenny1_powerpc.deb


• Debian libfuse2_2.7.4-1.1+lenny1_powerpc.deb
  http://security.debian.org/pool/updates/main/f/fuse/libfuse2_2.7.4-1.1 +lenny1_powerpc.deb

FUSE 'fusermount' Race Condition Vulnerability

References:

• CVE-2009-3297 samba, fuse, ncpfs: Race condition by mount (mount.cifs, ncpmount) (Red Hat)
  
• FUSE Home Page (Miklos Szeredi)