Ecryptfs Utils vulnerabilities
7 known vulnerabilities affecting ecryptfs/ecryptfs_utils.
Total CVEs
7
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1MEDIUM3LOW3
Vulnerabilities
Page 1 of 1
CVE-2011-1835MEDIUMCVSS 4.4v58v59+2 more2014-02-15
CVE-2011-1835 [MEDIUM] CWE-255 CVE-2011-1835: The encrypted private-directory setup process in utils/ecryptfs-setup-private in ecryptfs-utils befo
The encrypted private-directory setup process in utils/ecryptfs-setup-private in ecryptfs-utils before 90 does not properly ensure that the passphrase file is created, which might allow local users to bypass intended access restrictions at a certain time in the new-user creation steps.
nvd
CVE-2011-1831MEDIUMCVSS 4.6v58v59+2 more2014-02-15
CVE-2011-1831 [MEDIUM] CWE-264 CVE-2011-1831: utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check mountpoint permis
utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, which allows local users to effectively replace any directory with a new filesystem, and consequently gain privileges, via a mount system call.
nvd
CVE-2011-1836MEDIUMCVSS 4.6v58v59+2 more2014-02-15
CVE-2011-1836 [MEDIUM] CWE-264 CVE-2011-1836: utils/ecryptfs-recover-private in ecryptfs-utils before 90 does not establish a subdirectory with sa
utils/ecryptfs-recover-private in ecryptfs-utils before 90 does not establish a subdirectory with safe permissions, which might allow local users to bypass intended access restrictions via standard filesystem operations during the recovery process.
nvd
CVE-2011-1832LOWCVSS 2.1v58v59+2 more2014-02-15
CVE-2011-1832 [LOW] CWE-264 CVE-2011-1832: utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check mountpoint permis
utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, which allows local users to remove directories via a umount system call.
nvd
CVE-2011-1834LOWCVSS 2.1v58v59+2 more2014-02-15
CVE-2011-1834 [LOW] CWE-264 CVE-2011-1834: utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly maintain the mtab file
utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly maintain the mtab file during error conditions, which allows local users to cause a denial of service (table corruption) or bypass intended unmounting restrictions via a umount system call.
nvd
CVE-2011-1837LOWCVSS 3.6v58v59+2 more2014-02-15
CVE-2011-1837 [LOW] CWE-264 CVE-2011-1837: The lock-counter implementation in utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 allows
The lock-counter implementation in utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 allows local users to overwrite arbitrary files via unspecified vectors.
nvd
CVE-2008-5188HIGHCVSS 7.2v45v46+14 more2008-11-21
CVE-2008-5188 [HIGH] CWE-255 CVE-2008-5188: The (1) ecryptfs-setup-private, (2) ecryptfs-setup-confidential, and (3) ecryptfs-setup-pam-wrapped.
The (1) ecryptfs-setup-private, (2) ecryptfs-setup-confidential, and (3) ecryptfs-setup-pam-wrapped.sh scripts in ecryptfs-utils 45 through 61 in eCryptfs place cleartext passwords on command lines, which allows local users to obtain sensitive information by listing the process.
nvd