Vulnerability Report

CVE-2005-1858

Title: FUSE sensitive information disclosure

Other

Proof Of Concept

PoC Available for CVE-2005-1858

CWE Category NVD-CWE-noinfo
Published Date Jun 03, 2005
Modified Date Jun 16, 2026
Exploit Status Available
Score 2.1 CVSS v2.0
Exploit Probability (EPSS)
0.76%

Vulnerability Summary

CVE-2005-1858: FUSE 2.x before 2.3.0 does not properly clear previously used memory from unfilled pages when the filesystem returns a short byte count to a read request, which may allow local users to obtain sensitive information.

Impacted Vendors

R
redhat 1
F
fuse 1
M
miklos_szeredi 1

Reference Links

http://bugs.debian.org/311634 http://secunia.com/advisories/15561/ http://secunia.com/advisories/16024 http://securitytracker.com/id?1014107 http://sourceforge.net/project/shownotes.php?release_id=331884 http://www.debian.org/security/2005/dsa-744 http://www.osvdb.org/17042 http://www.securityfocus.com/bid/13857 http://www.sven-tantau.de/public_files/fuse/fuse_20050603.txt http://bugs.debian.org/311634 http://secunia.com/advisories/15561/ http://secunia.com/advisories/16024 http://securitytracker.com/id?1014107 http://sourceforge.net/project/shownotes.php?release_id=331884 http://www.debian.org/security/2005/dsa-744 http://www.osvdb.org/17042 http://www.securityfocus.com/bid/13857 http://www.sven-tantau.de/public_files/fuse/fuse_20050603.txt
CVSS v2.0
Source Entity [email protected]
Severity LOW
2.1
Access Vector
N/A
Authentication
N/A
RAW VECTOR AV:L/AC:L/Au:N/C:P/I:N/A:N

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2005-1858 Exploits & PoCs (Proof Of Concept)

Exploit-DB https://www.exploit-db.com/exploits/25789
View Code
MODIFIED

Vulnerability data updated via NVD.

MODIFIED

Vulnerability data or affected products updated.

PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A
Complexity N/A
Privileges N/A
Interaction NONE
CVSS Vector String AV:L/AC:L/Au:N/C:P/I:N/A:N

Affected Stack

No specific products linked.