Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-1831
HistoryAug 09, 2011 - 12:00 a.m.

CVE-2011-1831

2011-08-0900:00:00
ubuntu.com
ubuntu.com
9

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

EPSS

0

Percentile

5.1%

utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not
properly check mountpoint permissions, which allows local users to
effectively replace any directory with a new filesystem, and consequently
gain privileges, via a mount system call.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchecryptfs-utils< 83-0ubuntu3.2.10.04.1UNKNOWN
ubuntu10.10noarchecryptfs-utils< 83-0ubuntu3.2.10.10.1UNKNOWN
ubuntu11.04noarchecryptfs-utils< 87-0ubuntu1.1UNKNOWN

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

EPSS

0

Percentile

5.1%