Red Hat Security AdvisoryRHSA-2011:1241
ecryptfs-utils security update
Released 2011-08-31 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- RHEL Desktop Workstation (v. 5 client) ecryptfs-utils-75-5.el5_7.2, ecryptfs-utils-devel-75-5.el5_7.2, ecryptfs-utils-devel-75-5.el5_7.2.i386
- Red Hat Enterprise Linux (v. 5 server) ecryptfs-utils-75-5.el5_7.2, ecryptfs-utils-75-5.el5_7.2.i386, ecryptfs-utils-75-5.el5_7.2.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 5 client) ecryptfs-utils-75-5.el5_7.2, ecryptfs-utils-75-5.el5_7.2.i386, ecryptfs-utils-gui-75-5.el5_7.2 +1
- Red Hat Enterprise Linux Server (v. 6) ecryptfs-utils-82-6.el6_1.3, ecryptfs-utils-82-6.el6_1.3.ppc
- Red Hat Enterprise Linux Server Optional (v. 6) ecryptfs-utils-82-6.el6_1.3, ecryptfs-utils-devel-82-6.el6_1.3, ecryptfs-utils-devel-82-6.el6_1.3.ppc +1
Fixes 6 records
Priority MEDIUM 44
When mount.ecrpytfs_private before version 87-0ubuntu1.2 calls setreuid() it doesn't also set the effective group id.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0098 · Published 2019-04-22 · Fixed CWE-254
Priority LOW 21
utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, which allows local users to effectively replace any directory with a new filesystem, and consequently gain privil…
CVSS 2.0MEDIUM 4.6· Local · No auth · Interaction — · EPSS 0.00366 · Published 2014-02-15 · Fixed CWE-264
Priority LOW 20
The encrypted private-directory setup process in utils/ecryptfs-setup-private in ecryptfs-utils before 90 does not properly ensure that the passphrase file is created, which might allow local users to bypass intended acc…
CVSS 2.0MEDIUM 4.4· Local · No auth · Interaction — · EPSS 0.00352 · Published 2014-02-15 · Fixed CWE-255
Priority LOW 17
The lock-counter implementation in utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 allows local users to overwrite arbitrary files via unspecified vectors.
CVSS 2.0LOW 3.6· Local · No auth · Interaction — · EPSS 0.00379 · Published 2014-02-15 · Fixed CWE-264
Priority LOW 11
utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly maintain the mtab file during error conditions, which allows local users to cause a denial of service (table corruption) or bypass intended unm…
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00382 · Published 2014-02-15 · Fixed CWE-264
Priority LOW 11
utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, which allows local users to remove directories via a umount system call.
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00382 · Published 2014-02-15 · Fixed CWE-264
THREATIST.IORead the docs