CVE-2008-5188

2008-11-2102:30:00

CWE-255

[email protected]

web.nvd.nist.gov

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

5.7

Confidence

Low

EPSS

Percentile

10.1%

JSON

The (1) ecryptfs-setup-private, (2) ecryptfs-setup-confidential, and (3) ecryptfs-setup-pam-wrapped.sh scripts in ecryptfs-utils 45 through 61 in eCryptfs place cleartext passwords on command lines, which allows local users to obtain sensitive information by listing the process.

Affected configurations

Nvd

Node

ecryptfsecryptfs_utilsMatch45

ecryptfsecryptfs_utilsMatch46

ecryptfsecryptfs_utilsMatch47

ecryptfsecryptfs_utilsMatch48

ecryptfsecryptfs_utilsMatch49

ecryptfsecryptfs_utilsMatch50

ecryptfsecryptfs_utilsMatch51

ecryptfsecryptfs_utilsMatch53

ecryptfsecryptfs_utilsMatch54

ecryptfsecryptfs_utilsMatch55

ecryptfsecryptfs_utilsMatch56

ecryptfsecryptfs_utilsMatch57

ecryptfsecryptfs_utilsMatch58

ecryptfsecryptfs_utilsMatch59

ecryptfsecryptfs_utilsMatch60

ecryptfsecryptfs_utilsMatch61

VendorProductVersionCPE
ecryptfsecryptfs_utils45cpe:2.3:a:ecryptfs:ecryptfs_utils:45:*:*:*:*:*:*:*
ecryptfsecryptfs_utils46cpe:2.3:a:ecryptfs:ecryptfs_utils:46:*:*:*:*:*:*:*
ecryptfsecryptfs_utils47cpe:2.3:a:ecryptfs:ecryptfs_utils:47:*:*:*:*:*:*:*
ecryptfsecryptfs_utils48cpe:2.3:a:ecryptfs:ecryptfs_utils:48:*:*:*:*:*:*:*
ecryptfsecryptfs_utils49cpe:2.3:a:ecryptfs:ecryptfs_utils:49:*:*:*:*:*:*:*
ecryptfsecryptfs_utils50cpe:2.3:a:ecryptfs:ecryptfs_utils:50:*:*:*:*:*:*:*
ecryptfsecryptfs_utils51cpe:2.3:a:ecryptfs:ecryptfs_utils:51:*:*:*:*:*:*:*
ecryptfsecryptfs_utils53cpe:2.3:a:ecryptfs:ecryptfs_utils:53:*:*:*:*:*:*:*
ecryptfsecryptfs_utils54cpe:2.3:a:ecryptfs:ecryptfs_utils:54:*:*:*:*:*:*:*
ecryptfsecryptfs_utils55cpe:2.3:a:ecryptfs:ecryptfs_utils:55:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ecryptfs	ecryptfs_utils	45	cpe:2.3:a:ecryptfs:ecryptfs_utils:45:::::::*
ecryptfs	ecryptfs_utils	46	cpe:2.3:a:ecryptfs:ecryptfs_utils:46:::::::*
ecryptfs	ecryptfs_utils	47	cpe:2.3:a:ecryptfs:ecryptfs_utils:47:::::::*
ecryptfs	ecryptfs_utils	48	cpe:2.3:a:ecryptfs:ecryptfs_utils:48:::::::*
ecryptfs	ecryptfs_utils	49	cpe:2.3:a:ecryptfs:ecryptfs_utils:49:::::::*
ecryptfs	ecryptfs_utils	50	cpe:2.3:a:ecryptfs:ecryptfs_utils:50:::::::*
ecryptfs	ecryptfs_utils	51	cpe:2.3:a:ecryptfs:ecryptfs_utils:51:::::::*
ecryptfs	ecryptfs_utils	53	cpe:2.3:a:ecryptfs:ecryptfs_utils:53:::::::*
ecryptfs	ecryptfs_utils	54	cpe:2.3:a:ecryptfs:ecryptfs_utils:54:::::::*
ecryptfs	ecryptfs_utils	55	cpe:2.3:a:ecryptfs:ecryptfs_utils:55:::::::*