CVE-2011-0543

Certain legacy functionality in fusermount in fuse 2.8.5 and earlier, when util-linux does not support the --no-canonicalize option, allows local users to bypass intended access restrictions and unmount arbitrary directories via a symlink attack.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
3.3 UNKNOWN
LOCAL
MEDIUM
AV:L/AC:M/Au:N/C:N/I:P/A:P
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 19%
VendorProductVersion
fusefuse
𝑥
≤ 2.8.5
fusefuse
1.9
fusefuse
2.0:pre0
fusefuse
2.0:pre1
fusefuse
2.1
fusefuse
2.2
fusefuse
2.2.1
fusefuse
2.3:pre
fusefuse
2.3:rc1
fusefuse
2.3.0
fusefuse
2.4.0
fusefuse
2.4.1
fusefuse
2.4.2
fusefuse
2.5.0
fusefuse
2.5.1
fusefuse
2.5.2
fusefuse
2.5.3
fusefuse
2.6.0
fusefuse
2.6.1
fusefuse
2.6.3
fusefuse
2.6.5
fusefuse
2.7.0
fusefuse
2.7.1
fusefuse
2.7.2
fusefuse
2.7.3
fusefuse
2.7.4
fusefuse
2.7.5
fusefuse
2.7.6
fusefuse
2.8.0
fusefuse
2.8.1
fusefuse
2.8.2
fusefuse
2.8.3
fusefuse
2.8.4
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
fuse
bullseye
2.9.9-5
fixed
squeeze
no-dsa
bookworm
2.9.9-6
fixed
sid
2.9.9-9
fixed
trixie
2.9.9-9
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
fuse
maverick
Fixed 2.8.4-1ubuntu1.3
released
lucid
Fixed 2.8.1-1.1ubuntu3.1
released
karmic
Fixed 2.7.4-1.1ubuntu4.5
released
hardy
Fixed 2.7.2-1ubuntu2.3
released
dapper
ignored
Common Weakness Enumeration