CVE-2011-1837
published 2014-02-15CVE-2011-1837: The lock-counter implementation in utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 allows local users to overwrite arbitrary files via unspecified…
PriorityP413low3.6CVSS 2.0
AVLACLAuNCNIPAP
EPSS
0.38%
30.0th percentile
The lock-counter implementation in utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 allows local users to overwrite arbitrary files via unspecified vectors.
Affected
36 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | ecryptfs-utils | < ecryptfs-utils 92-1 (bookworm) | ecryptfs-utils 92-1 (bookworm) |
| ecryptfs | ecryptfs-utils | <= 89 | — |
| ecryptfs | ecryptfs-utils | — | — |
| ecryptfs | ecryptfs-utils | — | — |
| ecryptfs | ecryptfs-utils | — | — |
| ecryptfs | ecryptfs-utils | — | — |
| ecryptfs | ecryptfs-utils | — | — |
| ecryptfs | ecryptfs-utils | — | — |
| ecryptfs | ecryptfs-utils | — | — |
| ecryptfs | ecryptfs-utils | — | — |
| ecryptfs | ecryptfs-utils | — | — |
| ecryptfs | ecryptfs-utils | — | — |
| ecryptfs | ecryptfs-utils | — | — |
| ecryptfs | ecryptfs-utils | — | — |
| ecryptfs | ecryptfs-utils | — | — |
| ecryptfs | ecryptfs-utils | — | — |
| ecryptfs | ecryptfs-utils | — | — |
| ecryptfs | ecryptfs-utils | — | — |
| ecryptfs | ecryptfs-utils | — | — |
| ecryptfs | ecryptfs-utils | — | — |
| ecryptfs | ecryptfs-utils | — | — |
| ecryptfs | ecryptfs-utils | — | — |
| ecryptfs | ecryptfs-utils | — | — |
| ecryptfs | ecryptfs-utils | — | — |
| ecryptfs | ecryptfs-utils | — | — |
CVSS provenance
nvdv2.03.6LOWAV:L/AC:L/Au:N/C:N/I:P/A:P
osv3.6LOW
vendor_ubuntu4.6MEDIUM
vendor_debian3.6LOW
vendor_redhat3.6LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
ecryptfs: multiple flaws to mount/umount arbitrary locations and possibly disclose confidential information
vendor_redhat·2011-08-09·CVSS 3.6
CVE-2011-1837 [LOW] ecryptfs: multiple flaws to mount/umount arbitrary locations and possibly disclose confidential information
ecryptfs: multiple flaws to mount/umount arbitrary locations and possibly disclose confidential information
The lock-counter implementation in utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 allows local users to overwrite arbitrary files via unspecified vectors.
Ubuntu
eCryptfs vulnerabilities
vendor_ubuntu·2011-08-09·CVSS 4.6
CVE-2011-1834 [MEDIUM] eCryptfs vulnerabilities
Title: eCryptfs vulnerabilities
Summary: eCryptfs could be tricked into mounting and unmounting arbitrary locations,
and possibly disclose confidential information.
Vasiliy Kulikov and Dan Rosenberg discovered that eCryptfs incorrectly
validated permissions on the requested mountpoint. A local attacker could
use this flaw to mount to arbitrary locations, leading to privilege
escalation. (CVE-2011-1831)
Vasiliy Kulikov and Dan Rosenberg discovered that eCryptfs incorrectly
validated permissions on the requested mountpoint. A local attacker could
use this flaw to unmount to arbitrary locations, leading to a denial of
service. (CVE-2011-1832)
Vasiliy Kulikov and Dan Rosenberg discovered that eCryptfs incorrectly
validated permissions on the requested source directory. A local attacker
cou
Debian
CVE-2011-1837: ecryptfs-utils - The lock-counter implementation in utils/mount.ecryptfs_private.c in ecryptfs-ut...
vendor_debian·2011·CVSS 3.6
CVE-2011-1837 [LOW] CVE-2011-1837: ecryptfs-utils - The lock-counter implementation in utils/mount.ecryptfs_private.c in ecryptfs-ut...
The lock-counter implementation in utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 allows local users to overwrite arbitrary files via unspecified vectors.
Scope: local
bookworm: resolved (fixed in 92-1)
bullseye: resolved (fixed in 92-1)
forky: resolved (fixed in 92-1)
sid: resolved (fixed in 92-1)
trixie: resolved (fixed in 92-1)
GHSA
GHSA-29qx-j9r5-xp78: The lock-counter implementation in utils/mount
ghsa_unreviewed·2022-05-17
CVE-2011-1837 [LOW] GHSA-29qx-j9r5-xp78: The lock-counter implementation in utils/mount
The lock-counter implementation in utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 allows local users to overwrite arbitrary files via unspecified vectors.
OSV
CVE-2011-1837: The lock-counter implementation in utils/mount
osv·2014-02-15·CVSS 3.6
CVE-2011-1837 [LOW] CVE-2011-1837: The lock-counter implementation in utils/mount
The lock-counter implementation in utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 allows local users to overwrite arbitrary files via unspecified vectors.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2011-1831 CVE-2011-1832 CVE-2011-1834 CVE-2011-1835 CVE-2011-1837 ecryptfs: multiple flaws to mount/umount arbitrary locations and possibly disclose confidential information
bugzilla·2011-08-09·CVSS 4.6
CVE-2011-1831 [MEDIUM] CVE-2011-1831 CVE-2011-1832 CVE-2011-1834 CVE-2011-1835 CVE-2011-1837 ecryptfs: multiple flaws to mount/umount arbitrary locations and possibly disclose confidential information
CVE-2011-1831 CVE-2011-1832 CVE-2011-1834 CVE-2011-1835 CVE-2011-1837 ecryptfs: multiple flaws to mount/umount arbitrary locations and possibly disclose confidential information
A number of flaws were reported [1] in eCryptfs that could allow a user to mount or unmount arbitrary locations, and possibly disclose confidential information:
Vasiliy Kulikov of Openwall and Dan Rosenberg discovered that eCryptfs incorrectly validated permissions on the requested mountpoint. A local attacker could use this flaw to mount to arbitrary locations, leading to privilege escalation. (CVE-2011-1831)
Vasiliy Kulikov of Openwall and Dan Rosenberg discovered that eCryptfs incorrectly validated permissions on the requested mountpoint. A local attacker could use this flaw to unmount to arbitrary locations,
Bugzilla
CVE-2011-1831 CVE-2011-1832 CVE-2011-1834 CVE-2011-1835 CVE-2011-1836 CVE-2011-1837 ecryptfs: multiple flaws to mount/umount arbitrary locations and possibly disclose confidential information [fedora-
bugzilla·2011-08-09·CVSS 4.6
CVE-2011-1831 [MEDIUM] CVE-2011-1831 CVE-2011-1832 CVE-2011-1834 CVE-2011-1835 CVE-2011-1836 CVE-2011-1837 ecryptfs: multiple flaws to mount/umount arbitrary locations and possibly disclose confidential information [fedora-
CVE-2011-1831 CVE-2011-1832 CVE-2011-1834 CVE-2011-1835 CVE-2011-1836 CVE-2011-1837 ecryptfs: multiple flaws to mount/umount arbitrary locations and possibly disclose confidential information [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected Fedora
versions.
For comments that are specific to the vulnerability please use bugs filed
against "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please include the bug IDs of the
respective parent bugs filed against the "Security Response" product.
Please mention CVE ids in the RPM changelog when available.
Bodhi update
http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00009.htmlhttp://www.ubuntu.com/usn/USN-1188-1https://bugzilla.redhat.com/show_bug.cgi?id=729465https://launchpad.net/ecryptfs/+downloadhttp://lists.opensuse.org/opensuse-security-announce/2011-08/msg00009.htmlhttp://www.ubuntu.com/usn/USN-1188-1https://bugzilla.redhat.com/show_bug.cgi?id=729465https://launchpad.net/ecryptfs/+download
2014-02-15
Published