CVE-2008-5188 The (1) ecryptfs-setup-private, (2) ecryptfs-setup-confidential, and (3) ecryptfs-setup-pam-wrapped.sh scripts in ecryptfs-utils 45 through 61 in eCryptfs place cleartext passwords on command lines, w...
HighCVSS 7.2
EPSS 0.39%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The (1) ecryptfs-setup-private, (2) ecryptfs-setup-confidential, and (3) ecryptfs-setup-pam-wrapped.sh scripts in ecryptfs-utils 45 through 61 in eCryptfs place cleartext passwords on command lines, which allows local users to obtain sensitive information by listing the process.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ecryptfs utils | = 45 | No fix listed |
| ecryptfs utils | = 46 | No fix listed |
| ecryptfs utils | = 47 | No fix listed |
| ecryptfs utils | = 48 | No fix listed |
| ecryptfs utils | = 49 | No fix listed |
| ecryptfs utils | = 50 | No fix listed |
| ecryptfs utils | = 51 | No fix listed |
| ecryptfs utils | = 53 | No fix listed |
| ecryptfs utils | = 54 | No fix listed |
| ecryptfs utils | = 55 | No fix listed |
| ecryptfs utils | = 56 | No fix listed |
| ecryptfs utils | = 57 | No fix listed |
| ecryptfs utils | = 58 | No fix listed |
| ecryptfs utils | = 59 | No fix listed |
| ecryptfs utils | = 60 | No fix listed |
| ecryptfs utils | = 61 | No fix listed |
| debian/ecryptfs-utils(Debian:12) | < 66-1 | 66-1 |
| debian/ecryptfs-utils(Debian:13) | < 66-1 | 66-1 |
| debian/ecryptfs-utils(Debian:14) | < 66-1 | 66-1 |
References
- git.kernel.org
- 49334 vdb-entry
- 50353 vdb-entry
- 50354 vdb-entry
- 50355 vdb-entry
- RHSA-2009:1307 vendor-advisory
- 32382 third-party-advisory
- 36552 third-party-advisory
- [oss-security] 20081023 CVE request for ecryptfs mailing-list
- [oss-security] 20081029 Re: CVE request for ecryptfs mailing-list
- [oss-security] 20081029 Re: CVE request for ecryptfs mailing-list
- ecryptfsutils-setupprivate-info-disclosure(46073) vdb-entry
- launchpad.net
- oval:org.mitre.oval:def:9607 signature vdb-entry
- Debian Security Tracker CVE-2008-5188 vendor-advisory