FUSE CVE-2015-3202 Local Privilege Escalation Vulnerability
BID:74765
Info
FUSE CVE-2015-3202 Local Privilege Escalation Vulnerability
| Bugtraq ID: | 74765 |
| Class: | Design Error |
| CVE: |
CVE-2015-3202 |
| Remote: | No |
| Local: | Yes |
| Published: | May 21 2015 12:00AM |
| Updated: | Jul 05 2016 09:41PM |
| Credit: | Tavis Ormandy |
| Vulnerable: |
Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Miklos Szeredi FUSE 2.4.1 Miklos Szeredi FUSE 2.2.1 Miklos Szeredi FUSE 2.2 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 AlienVault Open Source SIEM (OSSIM) 3.1 |
| Not Vulnerable: | |
Discussion
FUSE CVE-2015-3202 Local Privilege Escalation Vulnerability
FUSE is prone to a local privilege-escalation vulnerability.
A local attacker can exploit this vulnerability to overwrite arbitrary files with root privileges.
FUSE is prone to a local privilege-escalation vulnerability.
A local attacker can exploit this vulnerability to overwrite arbitrary files with root privileges.
Solution / Fix
FUSE CVE-2015-3202 Local Privilege Escalation Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
FUSE CVE-2015-3202 Local Privilege Escalation Vulnerability
References:
References:
- CVE-2015-3202 fuse privilege escalation (Tavis Ormandy)
- File: mount_util.c (Debian)
- FUSE Home Page (Miklos Szeredi)
- Making a demo exploit for CVE-2015-3202 on Ubuntu fit in a tweet. (Tavis Ormandy)
- isg3T1022878: Security Bulletin: Vulnerability in FUSE affects PowerKVM (CVE-201 (IBM)
- Security Advisory - AlienVault v5.0.4 addresses 31 vulnerabilities (AlienVault)