Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 7

Export CSV
CVE-2008-5188

ecryptfs-utils: potential provided password disclosure in the process table

The (1) ecryptfs-setup-private, (2) ecryptfs-setup-confidential, and (3) ecryptfs-setup-pam-wrapped.sh scripts in ecryptfs-utils 45 through 61 in eCryptfs place cleartext passwords on command lines, which allows local users to obtain sensitive information by listing the process.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Ecryptfs Redhat
Products
Ecryptfs Utils Enterprise Linux
CVE-2011-1831

ecryptfs: multiple flaws to mount/umount arbitrary locations and possibly disclose confidential information

utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, which allows local users to effectively replace any directory with a new filesystem, and consequently gain privileges, via a mount system call.

CVSS 2.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Ecryptfs Redhat
Products
Ecryptfs-utils Ecryptfs Utils Enterprise Linux
CVE-2011-1832

ecryptfs: multiple flaws to mount/umount arbitrary locations and possibly disclose confidential information

utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, which allows local users to remove directories via a umount system call.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Ecryptfs Redhat
Products
Ecryptfs-utils Ecryptfs Utils Enterprise Linux
CVE-2011-1834

ecryptfs: multiple flaws to mount/umount arbitrary locations and possibly disclose confidential information

utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly maintain the mtab file during error conditions, which allows local users to cause a denial of service (table corruption) or bypass intended unmounting restrictions via a umount system call.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Ecryptfs Redhat
Products
Ecryptfs-utils Ecryptfs Utils Enterprise Linux
CVE-2011-1835

ecryptfs: multiple flaws to mount/umount arbitrary locations and possibly disclose confidential information

The encrypted private-directory setup process in utils/ecryptfs-setup-private in ecryptfs-utils before 90 does not properly ensure that the passphrase file is created, which might allow local users to bypass intended access restrictions at a certain time in the new-user creation steps.

CVSS 2.0 · 4.4 Medium EPSS < 1% KEV · Not listed
Vendors
Ecryptfs Redhat
Products
Ecryptfs-utils Ecryptfs Utils Enterprise Linux
CVE-2011-1836

ecryptfs-utils: ecryptfs-recover-private insecure permissions on the temporary mount point

utils/ecryptfs-recover-private in ecryptfs-utils before 90 does not establish a subdirectory with safe permissions, which might allow local users to bypass intended access restrictions via standard filesystem operations during the recovery process.

CVSS 2.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Ecryptfs
Products
Ecryptfs-utils Ecryptfs Utils
CVE-2011-1837

ecryptfs: multiple flaws to mount/umount arbitrary locations and possibly disclose confidential information

The lock-counter implementation in utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 allows local users to overwrite arbitrary files via unspecified vectors.

CVSS 2.0 · 3.6 Low EPSS < 1% KEV · Not listed
Vendors
Ecryptfs Redhat
Products
Ecryptfs-utils Ecryptfs Utils Enterprise Linux