Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2011-1835
HistoryFeb 15, 2014 - 2:57 p.m.

CVE-2011-1835

2014-02-1514:57:00
CWE-255
[email protected]
web.nvd.nist.gov
37
ecryptfs-utils
encrypted private-directory
access restrictions
vulnerability
local users
passphrase file
nvd

8.7 High

AI Score

Confidence

High

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.2%

JSON

The encrypted private-directory setup process in utils/ecryptfs-setup-private in ecryptfs-utils before 90 does not properly ensure that the passphrase file is created, which might allow local users to bypass intended access restrictions at a certain time in the new-user creation steps.

Related

ubuntucve 1
debiancve 1
prion 1
veracode 1
cvelist 1
nessus 12
suse 2
openvas 21
osv 1
debian 1
securityvulns 2
fedora 5
oraclelinux 1
redhat 1
centos 1
ubuntu 1
ubuntucve
ubuntucve
CVE-2011-1835
2011-08-09 00:00:00
debiancve
debiancve
CVE-2011-1835
2014-02-15 14:57:00
prion
prion
Design/Logic Flaw
2014-02-15 14:57:00
veracode
veracode
Access Control Bypass
2020-04-10 01:02:46
cvelist
cvelist
CVE-2011-1835
2014-02-15 11:00:00
nessus
nessus
Oracle Linux 5 / 6 : ecryptfs-utils (ELSA-2011-1241)
2013-07-12 00:00:00
openSUSE Security Update : ecryptfs-utils (openSUSE-SU-2011:0902-1)
2014-06-13 00:00:00
openSUSE Security Update : ecryptfs-utils (openSUSE-SU-2011:0902-1)
2014-06-13 00:00:00
suse
suse
ecryptfs-utils: Update to fix various symlink race attacks (important)
2011-08-12 21:08:14
Security update for ecryptfs-utils (important)
2011-08-12 06:08:16
openvas
openvas
Debian Security Advisory DSA 2382-1 (ecryptfs-utils)
2012-02-11 00:00:00
Debian: Security Advisory (DSA-2382-1)
2012-02-11 00:00:00
RedHat Update for ecryptfs-utils RHSA-2011:1241-01
2011-09-07 00:00:00
osv
osv
ecryptfs-utils - multiple
2012-01-07 00:00:00
debian
debian
[SECURITY] [DSA 2382-1] ecryptfs-utils security update
2012-01-07 18:49:31
securityvulns
securityvulns
[USN-1188-1] eCryptfs vulnerabilities
2011-08-11 00:00:00
eCryptfs multiple security vulnerabilities
2011-08-24 00:00:00
fedora
fedora
[SECURITY] Fedora 15 Update: ecryptfs-utils-90-1.fc15
2011-09-02 05:25:53
[SECURITY] Fedora 14 Update: ecryptfs-utils-90-1.fc14
2011-09-02 05:31:16
[SECURITY] Fedora 15 Update: ecryptfs-utils-90-2.fc15
2011-09-14 22:33:52
oraclelinux
oraclelinux
ecryptfs-utils security update
2011-08-31 00:00:00
redhat
redhat
(RHSA-2011:1241) Moderate: ecryptfs-utils security update
2011-08-31 00:00:00
centos
centos
ecryptfs security update
2011-09-01 16:11:04
ubuntu
ubuntu
eCryptfs vulnerabilities
2011-08-09 00:00:00

8.7 High

AI Score

Confidence

High

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.2%

JSON
Related for CVE-2011-1835
ubuntucve1debiancve1prion1veracode1cvelist1nessus12suse2openvas21osv1debian1securityvulns2fedora5oraclelinux1redhat1centos1ubuntu1