CVE-2005-1858 - Vulnerability Details - OpenCVE

FUSE 2.x before 2.3.0 does not properly clear previously used memory from unfilled pages when the filesystem returns a short byte count to a read request, which may allow local users to obtain sensitive information.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Fuse	Fuse

Configuration 1 [-]

OR	cpe:2.3:a:fuse:fuse:2.2:::::::*
	cpe:2.3:a:fuse:fuse:2.2.1:::::::*
	cpe:2.3:a:fuse:fuse:2.3_pre:::::::*
	cpe:2.3:a:fuse:fuse:2.3_rc1:::::::*

No data.

References

Link	Providers
http://bugs.debian.org/311634
http://secunia.com/advisories/15561/
http://secunia.com/advisories/16024
http://securitytracker.com/id?1014107
http://sourceforge.net/project/shownotes.php?release_id=331884
http://www.debian.org/security/2005/dsa-744
http://www.osvdb.org/17042
http://www.securityfocus.com/bid/13857
http://www.sven-tantau.de/public_files/fuse/fuse_20050603.txt

History

No history.

MITRE

Status: PUBLISHED

Assigner: debian

Published: 2005-06-06T04:00:00

Updated: 2024-08-07T22:06:57.644Z

Reserved: 2005-06-06T00:00:00

Link: CVE-2005-1858

Vulnrichment

No data.

NVD

Status : Modified

Published: 2005-06-03T04:00:00.000

Modified: 2024-11-20T23:58:17.563

Link: CVE-2005-1858

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2005-06-03T00:00:00", "descriptions": [{"lang": "en", "value": "FUSE 2.x before 2.3.0 does not properly clear previously used memory from unfilled pages when the filesystem returns a short byte count to a read request, which may allow local users to obtain sensitive information."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2005-07-12T09:00:00", "orgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5", "shortName": "debian"}, "references": [{"name": "16024", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/16024"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://bugs.debian.org/311634"}, {"name": "13857", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/13857"}, {"name": "1014107", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1014107"}, {"name": "15561", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/15561/"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://sourceforge.net/project/shownotes.php?release_id=331884"}, {"tags": ["x_refsource_MISC"], "url": "http://www.sven-tantau.de/public_files/fuse/fuse_20050603.txt"}, {"name": "DSA-744", "tags": ["vendor-advisory", "x_refsource_DEBIAN"], "url": "http://www.debian.org/security/2005/dsa-744"}, {"name": "17042", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/17042"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security@debian.org", "ID": "CVE-2005-1858", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "FUSE 2.x before 2.3.0 does not properly clear previously used memory from unfilled pages when the filesystem returns a short byte count to a read request, which may allow local users to obtain sensitive information."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "16024", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/16024"}, {"name": "http://bugs.debian.org/311634", "refsource": "CONFIRM", "url": "http://bugs.debian.org/311634"}, {"name": "13857", "refsource": "BID", "url": "http://www.securityfocus.com/bid/13857"}, {"name": "1014107", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1014107"}, {"name": "15561", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/15561/"}, {"name": "http://sourceforge.net/project/shownotes.php?release_id=331884", "refsource": "CONFIRM", "url": "http://sourceforge.net/project/shownotes.php?release_id=331884"}, {"name": "http://www.sven-tantau.de/public_files/fuse/fuse_20050603.txt", "refsource": "MISC", "url": "http://www.sven-tantau.de/public_files/fuse/fuse_20050603.txt"}, {"name": "DSA-744", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2005/dsa-744"}, {"name": "17042", "refsource": "OSVDB", "url": "http://www.osvdb.org/17042"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T22:06:57.644Z"}, "title": "CVE Program Container", "references": [{"name": "16024", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/16024"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://bugs.debian.org/311634"}, {"name": "13857", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/13857"}, {"name": "1014107", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1014107"}, {"name": "15561", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/15561/"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://sourceforge.net/project/shownotes.php?release_id=331884"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.sven-tantau.de/public_files/fuse/fuse_20050603.txt"}, {"name": "DSA-744", "tags": ["vendor-advisory", "x_refsource_DEBIAN", "x_transferred"], "url": "http://www.debian.org/security/2005/dsa-744"}, {"name": "17042", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/17042"}]}]}, "cveMetadata": {"assignerOrgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5", "assignerShortName": "debian", "cveId": "CVE-2005-1858", "datePublished": "2005-06-06T04:00:00", "dateReserved": "2005-06-06T00:00:00", "dateUpdated": "2024-08-07T22:06:57.644Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:fuse:fuse:2.2:*:*:*:*:*:*:*", "matchCriteriaId": "57EA26ED-6A5B-46FD-B776-56164C2CA2A7", "vulnerable": true}, {"criteria": "cpe:2.3:a:fuse:fuse:2.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "4070A046-AFAF-47E7-8143-950E7113F7D9", "vulnerable": true}, {"criteria": "cpe:2.3:a:fuse:fuse:2.3_pre:*:*:*:*:*:*:*", "matchCriteriaId": "B4959BEE-BB4C-4C69-8B64-10D6DBDBCEDE", "vulnerable": true}, {"criteria": "cpe:2.3:a:fuse:fuse:2.3_rc1:*:*:*:*:*:*:*", "matchCriteriaId": "C0D4EA36-BE3B-4FB6-AF1D-5D995737BADE", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "FUSE 2.x before 2.3.0 does not properly clear previously used memory from unfilled pages when the filesystem returns a short byte count to a read request, which may allow local users to obtain sensitive information."}], "id": "CVE-2005-1858", "lastModified": "2024-11-20T23:58:17.563", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 2.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2005-06-03T04:00:00.000", "references": [{"source": "security@debian.org", "tags": ["Vendor Advisory"], "url": "http://bugs.debian.org/311634"}, {"source": "security@debian.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/15561/"}, {"source": "security@debian.org", "url": "http://secunia.com/advisories/16024"}, {"source": "security@debian.org", "url": "http://securitytracker.com/id?1014107"}, {"source": "security@debian.org", "tags": ["Vendor Advisory"], "url": "http://sourceforge.net/project/shownotes.php?release_id=331884"}, {"source": "security@debian.org", "url": "http://www.debian.org/security/2005/dsa-744"}, {"source": "security@debian.org", "tags": ["Vendor Advisory"], "url": "http://www.osvdb.org/17042"}, {"source": "security@debian.org", "url": "http://www.securityfocus.com/bid/13857"}, {"source": "security@debian.org", "tags": ["Vendor Advisory"], "url": "http://www.sven-tantau.de/public_files/fuse/fuse_20050603.txt"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://bugs.debian.org/311634"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/15561/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/16024"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securitytracker.com/id?1014107"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://sourceforge.net/project/shownotes.php?release_id=331884"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.debian.org/security/2005/dsa-744"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.osvdb.org/17042"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/13857"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.sven-tantau.de/public_files/fuse/fuse_20050603.txt"}], "sourceIdentifier": "security@debian.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}