NVD

Id
25100  
Name
CVE-2015-3202  
Description
fusermount in FUSE before 2.9.3-15 does not properly clear the environment before invoking (1) mount or (2) umount as root, which allows local users to write to arbitrary files via a crafted LIBMOUNT_MTAB environment variable that is used by mount"s debugging feature.  
Reject
 
CVSS Version
2  
CVSS Score
3.6  
Severity
Low  
CVSS Base Score
3.6  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-07-02  
Modified Date
2016-12-27  
Seq
2015-3202  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
132651 25100 CVE-2015-3202 FEDORA-2015-8773  View
132652 25100 CVE-2015-3202 FEDORA-2015-8771  View
132653 25100 CVE-2015-3202 FEDORA-2015-8756  View
132654 25100 CVE-2015-3202 FEDORA-2015-8751  View
132655 25100 CVE-2015-3202 FEDORA-2015-8782  View
132656 25100 CVE-2015-3202 FEDORA-2015-8777  View
132657 25100 CVE-2015-3202 openSUSE-SU-2015:0997  View
132658 25100 CVE-2015-3202 openSUSE-SU-2015:1003  View
132659 25100 CVE-2015-3202 http://packetstormsecurity.com/files/132021/Fuse-Local-Privilege-Escalation.html  View
132660 25100 CVE-2015-3202 DSA-3266  View
132661 25100 CVE-2015-3202 DSA-3268  View
132662 25100 CVE-2015-3202 [oss-security] 20150521 CVE-2015-3202 fuse privilege escalation  View
132663 25100 CVE-2015-3202 74765  View
132664 25100 CVE-2015-3202 1032386  View
132665 25100 CVE-2015-3202 USN-2617-1  View
132666 25100 CVE-2015-3202 USN-2617-2  View
132667 25100 CVE-2015-3202 USN-2617-3  View
132668 25100 CVE-2015-3202 https://gist.github.com/taviso/ecb70eb12d461dd85cba  View
132669 25100 CVE-2015-3202 GLSA-201603-04  View
132670 25100 CVE-2015-3202 https://twitter.com/taviso/status/601370527437967360  View
132671 25100 CVE-2015-3202 37089  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
8111 JVNDB-2015-003431 FUSE の fusermount における任意のファイルに書き込まれる脆弱性 FUSE の fusermount は、root として (1) mount または (2) umount を呼び出す前に環境を適切にクリアしないため、任意のファイルに書き込まれる脆弱性が存在します。 CVE-2015-3202 80427 CVE-2015-3202 25100 3.6 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003431.html 2015-05-21 2015-07-08 View