CVE-2015-3202
CVE-2015-3202
fusermount in FUSE before 2.9.3-15 does not properly clear the environment before invoking (1) mount or (2) umount as root, which allows local users to write to arbitrary files via a crafted LIBMOUNT_MTAB environment variable that is used by mount's debugging feature.
Produtos afetados
n/a · n/aPoCs públicas encontradas — 3
cve_referencepacketstormsecurity.com/files/132021/Fuse-Local-Privilege-Escalation.htmlnão verificadocve_referencewww.exploit-db.com/exploits/37089/não verificadoexploitdbwww.exploit-db.com/exploits/37089não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Quer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →Referências
http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159298.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2015-June/159543.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2015-June/159683.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2015-June/159831.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2015-June/160094.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2015-June/160106.htmlhttp://lists.opensuse.org/opensuse-updates/2015-06/msg00005.htmlhttp://lists.opensuse.org/opensuse-updates/2015-06/msg00007.htmlhttp://packetstormsecurity.com/files/132021/Fuse-Local-Privilege-Escalation.htmlhttps://gist.github.com/taviso/ecb70eb12d461dd85cbahttps://security.gentoo.org/glsa/201603-04https://security.gentoo.org/glsa/201701-19