CVE-2011-1833 Race condition in the ecryptfs_mount function in fs/ecryptfs/main.c in the eCryptfs subsystem in the Linux kernel before 3.1 allows local users to bypass intended file permissions via a mount.ecryptfs...
LowCVSS 3.3
EPSS 0.36%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Race condition in the ecryptfs_mount function in fs/ecryptfs/main.c in the eCryptfs subsystem in the Linux kernel before 3.1 allows local users to bypass intended file permissions via a mount.ecryptfs_private mount with a mismatched uid.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/ecryptfs-utils(Debian:12) | < 92-1 | 92-1 |
| debian/ecryptfs-utils(Debian:13) | < 92-1 | 92-1 |
| debian/ecryptfs-utils(Debian:14) | < 92-1 | 92-1 |
| Linux kernel | <= 3.0.44 | No fix listed |
| Linux kernel | = 3.0-rc1 | No fix listed |
| Linux kernel | = 3.0-rc2 | No fix listed |
| Linux kernel | = 3.0-rc3 | No fix listed |
| Linux kernel | = 3.0-rc4 | No fix listed |
| Linux kernel | = 3.0-rc5 | No fix listed |
| Linux kernel | = 3.0-rc6 | No fix listed |
| Linux kernel | = 3.0-rc7 | No fix listed |
| Linux kernel | = 3.0.1 | No fix listed |
| Linux kernel | = 3.0.2 | No fix listed |
| Linux kernel | = 3.0.3 | No fix listed |
| Linux kernel | = 3.0.4 | No fix listed |
| Linux kernel | = 3.0.5 | No fix listed |
| Linux kernel | = 3.0.6 | No fix listed |
| Linux kernel | = 3.0.7 | No fix listed |
| Linux kernel | = 3.0.8 | No fix listed |
| Linux kernel | = 3.0.9 | No fix listed |
| Linux kernel | = 3.0.10 | No fix listed |
| Linux kernel | = 3.0.11 | No fix listed |
| Linux kernel | = 3.0.12 | No fix listed |
| Linux kernel | = 3.0.13 | No fix listed |
| Linux kernel | = 3.0.14 | No fix listed |
Show 29 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux kernel | = 3.0.15 | No fix listed |
| Linux kernel | = 3.0.16 | No fix listed |
| Linux kernel | = 3.0.17 | No fix listed |
| Linux kernel | = 3.0.18 | No fix listed |
| Linux kernel | = 3.0.19 | No fix listed |
| Linux kernel | = 3.0.20 | No fix listed |
| Linux kernel | = 3.0.21 | No fix listed |
| Linux kernel | = 3.0.22 | No fix listed |
| Linux kernel | = 3.0.23 | No fix listed |
| Linux kernel | = 3.0.24 | No fix listed |
| Linux kernel | = 3.0.25 | No fix listed |
| Linux kernel | = 3.0.26 | No fix listed |
| Linux kernel | = 3.0.27 | No fix listed |
| Linux kernel | = 3.0.28 | No fix listed |
| Linux kernel | = 3.0.29 | No fix listed |
| Linux kernel | = 3.0.30 | No fix listed |
| Linux kernel | = 3.0.31 | No fix listed |
| Linux kernel | = 3.0.32 | No fix listed |
| Linux kernel | = 3.0.33 | No fix listed |
| Linux kernel | = 3.0.34 | No fix listed |
| Linux kernel | = 3.0.35 | No fix listed |
| Linux kernel | = 3.0.36 | No fix listed |
| Linux kernel | = 3.0.37 | No fix listed |
| Linux kernel | = 3.0.38 | No fix listed |
| Linux kernel | = 3.0.39 | No fix listed |
| Linux kernel | = 3.0.40 | No fix listed |
| Linux kernel | = 3.0.41 | No fix listed |
| Linux kernel | = 3.0.42 | No fix listed |
| Linux kernel | = 3.0.43 | No fix listed |
References
- Debian Security Tracker CVE-2011-1833 vendor-advisory
- git.kernel.org
- SUSE-SU-2011:0898 vendor-advisory
- www.kernel.org
- USN-1188-1 vendor-advisory
- bugzilla.redhat.com
- github.com exploit patch