Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveRedhatCVE-2015-3202
HistoryJul 02, 2015 - 9:59 p.m.

CVE-2015-3202

2015-07-0221:59:03
CWE-264
redhat
web.nvd.nist.gov
80
fusermount
fuse
cve-2015-3202
security vulnerability
local users
arbitrary files

CVSS2

3.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:P/A:P

AI Score

6

Confidence

Low

EPSS

0

Percentile

0.4%

JSON

fusermount in FUSE before 2.9.3-15 does not properly clear the environment before invoking (1) mount or (2) umount as root, which allows local users to write to arbitrary files via a crafted LIBMOUNT_MTAB environment variable that is used by mount’s debugging feature.

Affected configurations

Nvd
Node
debiandebian_linuxMatch8.0
Node
fuse_projectfuseRange≤2.9.2
VendorProductVersionCPE
debiandebian_linux8.0cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
fuse_projectfuse*cpe:2.3:a:fuse_project:fuse:*:*:*:*:*:*:*:*

References

Related

debian 9
openvas 26
gentoo 2
ubuntucve 1
ubuntu 3
amazon 1
osv 5
nessus 29
fedora 6
mageia 1
exploitpack 1
exploitdb 1
zdt 1
debiancve 1
ibm 1
packetstorm 1
prion 1
securityvulns 2
cvelist 1
nvd 1
rosalinux 1
debian
debian
[SECURITY] [DSA 3266-1] fuse security update
2015-05-21 17:27:43
[SECURITY] [DLA 226-1] ntfs-3g security update
2015-05-25 18:02:01
[SECURITY] [DSA 3266-1] fuse security update
2015-05-21 17:27:43
openvas
openvas
Ubuntu: Security Advisory (USN-2617-3)
2015-09-18 00:00:00
Fedora Update for ntfs-3g FEDORA-2015-8777
2015-06-14 00:00:00
Mageia: Security Advisory (MGASA-2015-0239)
2022-01-28 00:00:00
gentoo
gentoo
2016-03-09 00:00:00
NTFS-3G: Privilege escalation
2017-01-11 00:00:00
ubuntucve
ubuntucve
CVE-2015-3202
2015-05-21 00:00:00
ubuntu
ubuntu
NTFS-3G vulnerability
2015-05-22 00:00:00
FUSE vulnerability
2015-05-21 00:00:00
NTFS-3G vulnerability
2015-05-27 00:00:00
amazon
amazon
Medium: fuse
2015-07-07 12:33:00
osv
osv
ntfs-3g - security update
2015-05-22 00:00:00
fuse - security update
2015-06-07 00:00:00
fuse - security update
2015-05-21 00:00:00
nessus
nessus
Fedora 22 : ntfs-3g-2015.3.14-2.fc22 (2015-8773)
2015-06-02 00:00:00
Ubuntu 15.04 : ntfs-3g vulnerability (USN-2617-2)
2015-05-26 00:00:00
RHEL 7 : fuse (Unpatched Vulnerability)
2024-06-03 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: ntfs-3g-2015.3.14-2.fc20
2015-06-13 06:37:20
[SECURITY] Fedora 21 Update: ntfs-3g-2015.3.14-2.fc21
2015-06-05 23:54:27
[SECURITY] Fedora 22 Update: ntfs-3g-2015.3.14-2.fc22
2015-06-01 17:01:55
mageia
mageia
Updated fuse packages fix CVE-2015-3202
2015-05-27 19:57:52
exploitpack
exploitpack
Fuse 2.9.3-15 - Local Privilege Escalation
2015-05-23 00:00:00
exploitdb
exploitdb
Fuse 2.9.3-15 - Local Privilege Escalation
2015-05-23 00:00:00
zdt
zdt
Fuse - Local Privilege Escalation Vulnerability
2015-05-23 00:00:00
debiancve
debiancve
CVE-2015-3202
2015-07-02 21:59:03
ibm
ibm
Security Bulletin: Vulnerability in FUSE affects PowerKVM (CVE-2015-3202)
2018-06-18 01:29:42
packetstorm
packetstorm
Fuse Local Privilege Escalation
2015-05-23 00:00:00
prion
prion
Design/Logic Flaw
2015-07-02 21:59:00
securityvulns
securityvulns
[SECURITY] [DSA 3268-1] ntfs-3g security update
2015-05-25 00:00:00
fuse NTFS-3G privilege escalation
2015-05-25 00:00:00
cvelist
cvelist
CVE-2015-3202
2015-07-02 21:16:00
nvd
nvd
CVE-2015-3202
2015-07-02 21:59:03
rosalinux
rosalinux
Advisory ROSA-SA-2021-1837
2021-07-02 16:44:02

CVSS2

3.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:P/A:P

AI Score

6

Confidence

Low

EPSS

0

Percentile

0.4%

JSON
Related for CVE-2015-3202
debian9openvas26gentoo2ubuntucve1ubuntu3amazon1osv5nessus29fedora6mageia1exploitpack1exploitdb1zdt1debiancve1ibm1packetstorm1prion1securityvulns2cvelist1nvd1rosalinux1