Lucene search
Veracode Vulnerability DatabaseVERACODE:28096HistoryDec 06, 2020 - 3:04 a.m.
Privilege Escalation
2020-12-0603:04:31
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
ntfs
privilege escalation
software
fuse driver
EPSS
0.001
Percentile
47.5%
NTFS is vulnerable to privilege escalation. The vulnerability exist because a read-write NTFS driver for FUSE does not scrub the environment before executing modprobe with elevated privileges.
References
www.openwall.com/lists/oss-security/2017/02/04/1
www.securityfocus.com/bid/95987
marc.info/?l=oss-security&m=148594671929354&w=2
security-tracker.debian.org/tracker/CVE-2017-0358
security.gentoo.org/glsa/201702-10
www.debian.org/security/2017/dsa-3780
www.exploit-db.com/exploits/41240/
www.exploit-db.com/exploits/41356/
Related
debian
debian
[SECURITY] [DLA 815-1] ntfs-3g security update
2017-02-02 17:39:12
[SECURITY] [DSA 3780-1] ntfs-3g security update
2017-02-01 17:56:39
canvas
canvas
Immunity Canvas: NTFS3G_MODPROBE
2018-04-13 15:29:00
nessus
nessus
GLSA-201702-10 : NTFS-3G: Privilege escalation
2017-02-21 00:00:00
SUSE SLED12 Security Update : ntfs-3g_ntfsprogs (SUSE-SU-2018:3587-1)
2018-11-01 00:00:00
SUSE SLED12 Security Update : ntfs-3g_ntfsprogs (SUSE-SU-2018:3587-2)
2018-12-14 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-3780-1)
2017-02-03 00:00:00
Debian: Security Advisory (DLA-815-1)
2018-01-04 00:00:00
Ubuntu: Security Advisory (USN-3182-1)
2017-02-03 00:00:00
suse
suse
Security update for ntfs-3g_ntfsprogs (low)
2018-11-10 00:15:12
zdt
zdt
Debian 9 ntfs-3g - Privilege Escalation Exploit
2017-02-04 00:00:00
nvd
nvd
CVE-2017-0358
2018-04-13 15:29:00
exploitdb
exploitdb
ntfs-3g - Unsanitized modprobe Environment Privilege Escalation
2017-02-14 00:00:00
ntfs-3g (Debian 9) - Local Privilege Escalation
2017-02-03 00:00:00
metasploit
metasploit
Debian/Ubuntu ntfs-3g Local Privilege Escalation
2017-02-26 04:09:22
prion
prion
Privilege escalation
2018-04-13 15:29:00
osv
osv
ntfs-3g - security update
2017-02-02 00:00:00
CVE-2017-0358
2018-04-13 15:29:00
ntfs-3g - security update
2017-02-01 00:00:00
ubuntu
ubuntu
NTFS-3G vulnerability
2017-02-01 00:00:00
packetstorm
packetstorm
Debian/Ubuntu ntfs-3g Local Privilege Escalation
2017-04-04 00:00:00
seebug
seebug
gentoo
gentoo
NTFS-3G: Privilege escalation
2017-02-19 00:00:00
cve
cve
CVE-2017-0358
2018-04-13 15:29:00
ubuntucve
ubuntucve
CVE-2017-0358
2017-02-01 00:00:00
cvelist
cvelist
debiancve
debiancve
CVE-2017-0358
2018-04-13 15:29:00
exploitpack
exploitpack
ntfs-3g (Debian 9) - Local Privilege Escalation
2017-02-03 00:00:00