CVE-2005-1858 Information disclosure in n/a
Local users can obtain sensitive information from memory due to improper clearing of unfilled pages in FUSE filesystems.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2005-1858?
CVE-2005-1858 is a low-severity vulnerability in n/a, published on 6 Jun 2005. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
FUSE 2.x before 2.3.0 does not properly clear previously used memory from unfilled pages when the filesystem returns a short byte count to a read request, which may allow local users to obtain sensitive information.
Which versions are affected by CVE-2005-1858?
It affects 1 product.
Products include Fuse Fuse.
How do I fix CVE-2005-1858?
Upgrade to a fixed version.
Is CVE-2005-1858 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2005-1858 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in n/a
Sources
Also known as DEBIAN-CVE-2005-1858, DSA-744-1, GHSA-4x4q-c47m-2xv4.