Lucene search

CanonicalCVE-2011-1835

HistoryFeb 15, 2014 - 2:57 p.m.

CVE-2011-1835

2014-02-1514:57:06

CWE-255

canonical

web.nvd.nist.gov

ecryptfs-utils

encrypted private-directory

access restrictions

vulnerability

local users

passphrase file

nvd

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

AI Score

8.6

Confidence

High

EPSS

Percentile

5.1%

JSON

The encrypted private-directory setup process in utils/ecryptfs-setup-private in ecryptfs-utils before 90 does not properly ensure that the passphrase file is created, which might allow local users to bypass intended access restrictions at a certain time in the new-user creation steps.

Affected configurations

Nvd

Node

ecryptfsecryptfs-utilsRange≤89

ecryptfsecryptfs-utilsMatch62

ecryptfsecryptfs-utilsMatch63

ecryptfsecryptfs-utilsMatch64

ecryptfsecryptfs-utilsMatch65

ecryptfsecryptfs-utilsMatch66

ecryptfsecryptfs-utilsMatch67

ecryptfsecryptfs-utilsMatch68

ecryptfsecryptfs-utilsMatch69

ecryptfsecryptfs-utilsMatch70

ecryptfsecryptfs-utilsMatch71

ecryptfsecryptfs-utilsMatch72

ecryptfsecryptfs-utilsMatch73

ecryptfsecryptfs-utilsMatch74

ecryptfsecryptfs-utilsMatch75

ecryptfsecryptfs-utilsMatch76

ecryptfsecryptfs-utilsMatch77

ecryptfsecryptfs-utilsMatch78

ecryptfsecryptfs-utilsMatch79

ecryptfsecryptfs-utilsMatch80

ecryptfsecryptfs-utilsMatch81

ecryptfsecryptfs-utilsMatch82

ecryptfsecryptfs-utilsMatch83

ecryptfsecryptfs-utilsMatch84

ecryptfsecryptfs-utilsMatch85

ecryptfsecryptfs-utilsMatch86

ecryptfsecryptfs-utilsMatch87

ecryptfsecryptfs_utilsMatch58

ecryptfsecryptfs_utilsMatch59

ecryptfsecryptfs_utilsMatch60

ecryptfsecryptfs_utilsMatch61

VendorProductVersionCPE
ecryptfsecryptfs-utils67cpe:/a:ecryptfs:ecryptfs-utils:67:::
ecryptfsecryptfs-utils80cpe:/a:ecryptfs:ecryptfs-utils:80:::
ecryptfsecryptfs-utils85cpe:/a:ecryptfs:ecryptfs-utils:85:::
ecryptfsecryptfs_utils58cpe:/a:ecryptfs:ecryptfs_utils:58:::
ecryptfsecryptfs-utils83cpe:/a:ecryptfs:ecryptfs-utils:83:::
ecryptfsecryptfs-utils84cpe:/a:ecryptfs:ecryptfs-utils:84:::
ecryptfsecryptfs-utils62cpe:/a:ecryptfs:ecryptfs-utils:62:::
ecryptfsecryptfs-utils63cpe:/a:ecryptfs:ecryptfs-utils:63:::
ecryptfsecryptfs-utils87cpe:/a:ecryptfs:ecryptfs-utils:87:::
ecryptfsecryptfs-utils71cpe:/a:ecryptfs:ecryptfs-utils:71:::

Vendor	Product	Version	CPE
ecryptfs	ecryptfs-utils	67	cpe:/a:ecryptfs:ecryptfs-utils:67:::
ecryptfs	ecryptfs-utils	80	cpe:/a:ecryptfs:ecryptfs-utils:80:::
ecryptfs	ecryptfs-utils	85	cpe:/a:ecryptfs:ecryptfs-utils:85:::
ecryptfs	ecryptfs_utils	58	cpe:/a:ecryptfs:ecryptfs_utils:58:::
ecryptfs	ecryptfs-utils	83	cpe:/a:ecryptfs:ecryptfs-utils:83:::
ecryptfs	ecryptfs-utils	84	cpe:/a:ecryptfs:ecryptfs-utils:84:::
ecryptfs	ecryptfs-utils	62	cpe:/a:ecryptfs:ecryptfs-utils:62:::
ecryptfs	ecryptfs-utils	63	cpe:/a:ecryptfs:ecryptfs-utils:63:::
ecryptfs	ecryptfs-utils	87	cpe:/a:ecryptfs:ecryptfs-utils:87:::
ecryptfs	ecryptfs-utils	71	cpe:/a:ecryptfs:ecryptfs-utils:71:::