----------------------------------------------------------------------

Try a new way to discover vulnerabilities that ALREADY EXIST in your
IT infrastructure.

The Secunia NSI enables you to INSPECT, DISCOVER, and DOCUMENT
vulnerabilities in more than 4,700 different Windows applications.

Request your account, the Secunia Network Software Inspector (NSI):
http://secunia.com/network_software_inspector/

----------------------------------------------------------------------

TITLE:
Fedora update for ntfs-3g

SECUNIA ADVISORY ID:
SA26938

VERIFY ADVISORY:
http://secunia.com/advisories/26938/

CRITICAL:
Less critical

IMPACT:
Privilege escalation

WHERE:
Local system

OPERATING SYSTEM:
Fedora 7
http://secunia.com/product/15552/

DESCRIPTION:
Fedora has issued an update for ntfs-3g. This fixes a weakness, which
can be exploited by malicious, local users to perform certain actions
with escalated privileges.

The weakness is caused due to improper set user id permissions
assigned to the "/sbin/mount.ntfs-3g" file. This can be exploited by
members of the group fuse to gain read and write access to restricted
devices.

SOLUTION:
Apply updated packages.

a36eea819a0ac9ef4c5ecd7b2bcb747c812fde91
ntfs-3g-debuginfo-1.913-2.fc7.ppc64.rpm
f931506a81123e29b3f079845d4a1b3fa5a83bc5
ntfs-3g-devel-1.913-2.fc7.ppc64.rpm
82362930bbd37197203c6c075ea96586e74c9059
ntfs-3g-1.913-2.fc7.ppc64.rpm
3c14b64483d6153d115319584f84dcd7d19439a9
ntfs-3g-1.913-2.fc7.i386.rpm
fe8b4fd7c7bd53b1dea6e1ca547b757438ff143f
ntfs-3g-devel-1.913-2.fc7.i386.rpm
b255ad854501109a4f7733b6d68373fda98097dd
ntfs-3g-debuginfo-1.913-2.fc7.i386.rpm
8c52a5245090e488c5f13c4a3189ae50bb920c2a
ntfs-3g-devel-1.913-2.fc7.x86_64.rpm
76dc464a0ca71518d3297e512c37f1dfdc99219a
ntfs-3g-debuginfo-1.913-2.fc7.x86_64.rpm
5468d34999aa098d247dc40c632a289a4b7a546b
ntfs-3g-1.913-2.fc7.x86_64.rpm
56d5eaafe241b8753abf2ab52e555caf00f0ddd6
ntfs-3g-debuginfo-1.913-2.fc7.ppc.rpm
7bad483414cbbb6f45958139a79c56c32fb697b8
ntfs-3g-devel-1.913-2.fc7.ppc.rpm
f23111e33f56a028049522df48e7ee9fff4172d0 ntfs-3g-1.913-2.fc7.ppc.rpm
3f34f6d3df64d6bcde86fd0ee356ae7b89055af4 ntfs-3g-1.913-2.fc7.src.rpm

PROVIDED AND/OR DISCOVERED BY:
Thorsten Leemhuis.

ORIGINAL ADVISORY:
https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00368.html

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------