CVE-2005-1858
FUSE 2.x < 2.3.0 - Information Disclosure via Unfilled Memory Pages
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2005-1858. PoCs published by Miklos Szeredi.
AI-analyzed exploit summary This exploit demonstrates an information disclosure vulnerability in FUSE versions prior to 2.3.0, where uninitialized kernel memory is exposed to local users. The PoC creates a FUSE filesystem that reads uninitialized memory, potentially leaking sensitive data.
Description
FUSE 2.x before 2.3.0 does not properly clear previously used memory from unfilled pages when the filesystem returns a short byte count to a read request, which may allow local users to obtain sensitive information.
Exploits (1)
This exploit demonstrates an information disclosure vulnerability in FUSE versions prior to 2.3.0, where uninitialized kernel memory is exposed to local users. The PoC creates a FUSE filesystem that reads uninitialized memory, potentially leaking sensitive data.