CVE-2010-0789

Severity: low (CVSS 3.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-03-02 · updated 2026-06-16
Weakness: CWE-59

Description

fusermount in FUSE before 2.7.5, and 2.8.x before 2.8.2, allows local users to unmount an arbitrary FUSE filesystem share via a symlink attack on a mountpoint.

Affected products

Fuse: 1.9, 2.0-pre0, 2.0-pre1, 2.1, 2.2, 2.2.1 (+19)

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567633
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034518.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034580.html
http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00003.html
http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html
http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html
http://secunia.com/advisories/38261
http://secunia.com/advisories/38287
http://secunia.com/advisories/38359
http://secunia.com/advisories/38437
http://sourceforge.net/projects/fuse/files/ReleaseNotes/fuse-2.8.3.html/view
http://sourceforge.net/projects/fuse/files/fuse-2.X/2.7.5/fuse-2.7.5.tar.gz/download

Get alerted when CVE-2010-0789 or the next vulnerability affects your stack