Skip to content

CVE-2011-1835 The encrypted private-directory setup process in utils/ecryptfs-setup-private in ecryptfs-utils before 90 does not properly ensure that the passphrase file is created, which might allow local users to...

MediumCVSS 4.4 EPSS 0.35%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

The encrypted private-directory setup process in utils/ecryptfs-setup-private in ecryptfs-utils before 90 does not properly ensure that the passphrase file is created, which might allow local users to bypass intended access restrictions at a certain time in the new-user creation steps.

Affected products

ProductAffected versionsFixed in
debian/ecryptfs-utils(Debian:12) < 92-1 92-1
debian/ecryptfs-utils(Debian:13) < 92-1 92-1
debian/ecryptfs-utils(Debian:14) < 92-1 92-1
ecryptfs-utils <= 89 No fix listed
ecryptfs-utils = 62 No fix listed
ecryptfs-utils = 63 No fix listed
ecryptfs-utils = 64 No fix listed
ecryptfs-utils = 65 No fix listed
ecryptfs-utils = 66 No fix listed
ecryptfs-utils = 67 No fix listed
ecryptfs-utils = 68 No fix listed
ecryptfs-utils = 69 No fix listed
ecryptfs-utils = 70 No fix listed
ecryptfs-utils = 71 No fix listed
ecryptfs-utils = 72 No fix listed
ecryptfs-utils = 73 No fix listed
ecryptfs-utils = 74 No fix listed
ecryptfs-utils = 75 No fix listed
ecryptfs-utils = 76 No fix listed
ecryptfs-utils = 77 No fix listed
ecryptfs-utils = 78 No fix listed
ecryptfs-utils = 79 No fix listed
ecryptfs-utils = 80 No fix listed
ecryptfs-utils = 81 No fix listed
ecryptfs-utils = 82 No fix listed
Show 9 more
ProductAffected versionsFixed in
ecryptfs-utils = 83 No fix listed
ecryptfs-utils = 84 No fix listed
ecryptfs-utils = 85 No fix listed
ecryptfs-utils = 86 No fix listed
ecryptfs-utils = 87 No fix listed
ecryptfs utils = 58 No fix listed
ecryptfs utils = 59 No fix listed
ecryptfs utils = 60 No fix listed
ecryptfs utils = 61 No fix listed

References