cve/2015/CVE-2015-3202.md

CVE-2015-3202

Description

fusermount in FUSE before 2.9.3-15 does not properly clear the environment before invoking (1) mount or (2) umount as root, which allows local users to write to arbitrary files via a crafted LIBMOUNT_MTAB environment variable that is used by mount's debugging feature.

POC

Reference

• http://packetstormsecurity.com/files/132021/Fuse-Local-Privilege-Escalation.html
• http://www.ubuntu.com/usn/USN-2617-2
• https://www.exploit-db.com/exploits/37089/

Github

• https://github.com/ARPSyndicate/cvemon