Debian Security Advisory 1611-1 – Anders Kaseorg discovered that afuse, an automounting file system in user-space, did not properly escape meta characters in paths. This allowed a local attacker with read access to the filesystem to execute commands as the owner of the filesystem.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/68273/dsa-1611-1.txt
Source: https://packetstormsecurity.com/files/68273/Debian-Linux-Security-Advisory-1611-1.html