Description
The ntfs-3g package before 1.913-2.fc7 in Fedora 7, and an ntfs-3g package in Ubuntu 7.10/Gutsy, assign incorrect permissions (setuid root) to mount.ntfs-3g, which allows local users with fuse group membership to read from and write to arbitrary block devices, possibly involving a file descriptor leak.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | ntfs-3g | 1:1.913-2 | — |
| Debian 13 | ntfs-3g | 1:1.913-2 | — |
| Debian 12 | ntfs-3g | 1:1.913-2 | — |
References
- FEDORA-2007-2295 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=298651
- [fedora-desktop-list] 20070918 Re: fuse (Was Re: early-gdm redux) mailing-list
- 26938 third-party-advisory