Red Hat Security AdvisoryRHSA-2009:1307
ecryptfs-utils security, bug fix, and enhancement update
Released 2009-09-02 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) ecryptfs-utils-75-5.el5, ecryptfs-utils-75-5.el5.i386, ecryptfs-utils-75-5.el5.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 5 client) ecryptfs-utils-75-5.el5, ecryptfs-utils-75-5.el5.i386, ecryptfs-utils-gui-75-5.el5 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) ecryptfs-utils-75-5.el5, ecryptfs-utils-devel-75-5.el5, ecryptfs-utils-devel-75-5.el5.i386
Fixes 1 record
Priority LOW 32
The (1) ecryptfs-setup-private, (2) ecryptfs-setup-confidential, and (3) ecryptfs-setup-pam-wrapped.sh scripts in ecryptfs-utils 45 through 61 in eCryptfs place cleartext passwords on command lines, which allows local us…
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00386 · Published 2008-11-21 · Fixed CWE-255
