Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2011-3145
HistoryApr 22, 2019 - 4:29 p.m.

CVE-2011-3145

2019-04-2216:29:00
CWE-254
mitre
web.nvd.nist.gov
44
cve
2011
3145
mount
ecryptfs
privilege escalation
nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.2

Confidence

High

EPSS

0.002

Percentile

59.9%

JSON

When mount.ecrpytfs_private before version 87-0ubuntu1.2 calls setreuid() it doesn’t also set the effective group id. So when it creates the new version, mtab.tmp, it’s created with the group id of the user running mount.ecryptfs_private.

Affected configurations

Nvd
Node
mount.ecrpytfs_private_projectmount.ecrpytfs_privateMatch-
VendorProductVersionCPE
mount.ecrpytfs_private_projectmount.ecrpytfs_private-cpe:/a:mount.ecrpytfs_private_project:mount.ecrpytfs_private:-:::

Related

prion 1
cvelist 1
openvas 18
debiancve 1
nessus 12
veracode 1
ubuntucve 1
nvd 1
ubuntu 1
fedora 3
securityvulns 2
osv 1
debian 1
oraclelinux 1
centos 1
redhat 1
prion
prion
Code injection
2019-04-22 16:29:00
cvelist
cvelist
CVE-2011-3145 mount.ecrpytfs_private sets group owner of /etc/mtab to user's primary group
2011-08-23 00:00:00
openvas
openvas
Ubuntu Update for ecryptfs-utils USN-1196-1
2011-08-27 00:00:00
SUSE: Security Advisory (SUSE-SU-2012:0682-1)
2021-06-09 00:00:00
Fedora Update for ecryptfs-utils FEDORA-2011-11871
2012-03-19 00:00:00
debiancve
debiancve
CVE-2011-3145
2019-04-22 16:29:00
nessus
nessus
Ubuntu 10.04 LTS / 10.10 / 11.04 : ecryptfs-utils vulnerability (USN-1196-1)
2011-08-24 00:00:00
openSUSE Security Update : ecryptfs-utils (openSUSE-SU-2012:0106-1)
2014-06-13 00:00:00
SuSE 11.1 Security Update : ecryptfs-utils (SAT Patch Number 6187)
2013-01-25 00:00:00
veracode
veracode
Arbitrary File Write
2020-04-10 01:02:46
ubuntucve
ubuntucve
CVE-2011-3145
2011-08-23 00:00:00
nvd
nvd
CVE-2011-3145
2019-04-22 16:29:00
ubuntu
ubuntu
eCryptfs vulnerability
2011-08-23 00:00:00
fedora
fedora
[SECURITY] Fedora 16 Update: ecryptfs-utils-90-2.fc16
2011-09-30 18:54:56
[SECURITY] Fedora 15 Update: ecryptfs-utils-90-2.fc15
2011-09-14 22:33:52
[SECURITY] Fedora 14 Update: ecryptfs-utils-90-2.fc14
2011-09-14 22:31:26
securityvulns
securityvulns
[USN-1196-1] eCryptfs vulnerability
2011-08-24 00:00:00
eCryptfs multiple security vulnerabilities
2011-08-24 00:00:00
osv
osv
ecryptfs-utils - multiple
2012-01-07 00:00:00
debian
debian
[SECURITY] [DSA 2382-1] ecryptfs-utils security update
2012-01-07 18:48:38
oraclelinux
oraclelinux
ecryptfs-utils security update
2011-08-31 00:00:00
centos
centos
ecryptfs security update
2011-09-01 16:11:04
redhat
redhat
(RHSA-2011:1241) Moderate: ecryptfs-utils security update
2011-08-31 00:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.2

Confidence

High

EPSS

0.002

Percentile

59.9%

JSON
Related for CVE-2011-3145
prion1cvelist1openvas18debiancve1nessus12veracode1ubuntucve1nvd1ubuntu1fedora3securityvulns2osv1debian1oraclelinux1centos1redhat1