Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Fri, 5 Nov 2010 15:41:11 -0400 (EDT)
From: Josh Bressers <bressers@...hat.com>
To: oss-security@...ts.openwall.com
Cc: coley <coley@...re.org>
Subject: Re: CVE request: fuse

Please use CVE-2010-3879

Thanks.

-- 
    JB


----- "Marc Deslauriers" <marc.deslauriers@...onical.com> wrote:

> Hello,
> 
> There is an issue with FUSE that lets unprivileged users unmount
> arbitrary locations via a symlink attack. This is a different issue
> than
> CVE-2009-3297 and CVE-2010-0789.
> 
> Ref.:
> 
> http://seclists.org/fulldisclosure/2010/Nov/15
> http://www.halfdog.net/Security/FuseTimerace/
> 
> Thanks,
> 
> Marc.
> 
> 
> -- 
> Marc Deslauriers
> Ubuntu Security Engineer     | http://www.ubuntu.com/
> Canonical Ltd.               | http://www.canonical.com/

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Powered by Openwall GNU/*/Linux - Powered by OpenVZ