Ecryptfs Utils vulnerabilities
7 vulnerabilities
Known vulnerabilities in Ecryptfs Utils, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
RoutineCVE-2011-1837ecryptfs · ecryptfs_utils +2 moreecryptfs ecryptfs_utilsThe lock-counter implementation in utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 allows local users to overwrite arbitrary files via unspecified vectors.CVSS3.6LowEPSS0.38%RoutineCVE-2011-1836ecryptfs · ecryptfs_utils +2 moreecryptfs ecryptfs_utilsutils/ecryptfs-recover-private in ecryptfs-utils before 90 does not establish a subdirectory with safe permissions, which might allow local users to bypass intended access restrictions via standard filesystem operations during the recovery process.CVSS4.6MediumEPSS0.38%RoutineCVE-2011-1835ecryptfs · ecryptfs_utils +2 moreecryptfs ecryptfs_utilsThe encrypted private-directory setup process in utils/ecryptfs-setup-private in ecryptfs-utils before 90 does not properly ensure that the passphrase file is created, which might allow local users to bypass intended access restrictions at a certain time in the new-user creation steps.CVSS4.4MediumEPSS0.35%RoutineCVE-2011-1834ecryptfs · ecryptfs_utils +2 moreecryptfs ecryptfs_utilsutils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly maintain the mtab file during error conditions, which allows local users to cause a denial of service (table corruption) or bypass intended unmounting restrictions via a umount system call.CVSS2.1LowEPSS0.38%RoutineCVE-2011-1832ecryptfs · ecryptfs_utils +2 moreecryptfs ecryptfs_utilsutils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, which allows local users to remove directories via a umount system call.CVSS2.1LowEPSS0.38%RoutineCVE-2011-1831ecryptfs · ecryptfs_utils +2 moreecryptfs ecryptfs_utilsutils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, which allows local users to effectively replace any directory with a new filesystem, and consequently gain privileges, via a mount system call.CVSS4.6MediumEPSS0.37%RoutineCVE-2008-5188ecryptfs · ecryptfs_utils +5 moreecryptfs ecryptfs_utilsThe (1) ecryptfs-setup-private, (2) ecryptfs-setup-confidential, and (3) ecryptfs-setup-pam-wrapped.sh scripts in ecryptfs-utils 45 through 61 in eCryptfs place cleartext passwords on command lines, which allows local users to obtain sensitive information by listing the process.CVSS7.2HighEPSS0.39%