Lucene search
MitreCVELIST:CVE-2011-3145HistoryAug 23, 2011 - 12:00 a.m.
CVE-2011-3145 mount.ecrpytfs_private sets group owner of /etc/mtab to user's primary group
2011-08-2300:00:00
mitre
www.cve.org
6
CVSS3
3.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L
AI Score
9.4
Confidence
High
EPSS
0.002
Percentile
59.9%
When mount.ecrpytfs_private before version 87-0ubuntu1.2 calls setreuid() it doesn’t also set the effective group id. So when it creates the new version, mtab.tmp, it’s created with the group id of the user running mount.ecryptfs_private.
Related
prion
prion
Code injection
2019-04-22 16:29:00
openvas
openvas
Ubuntu Update for ecryptfs-utils USN-1196-1
2011-08-27 00:00:00
SUSE: Security Advisory (SUSE-SU-2012:0682-1)
2021-06-09 00:00:00
Fedora Update for ecryptfs-utils FEDORA-2011-11871
2012-03-19 00:00:00
cve
cve
CVE-2011-3145
2019-04-22 16:29:00
debiancve
debiancve
CVE-2011-3145
2019-04-22 16:29:00
nessus
nessus
Ubuntu 10.04 LTS / 10.10 / 11.04 : ecryptfs-utils vulnerability (USN-1196-1)
2011-08-24 00:00:00
openSUSE Security Update : ecryptfs-utils (openSUSE-SU-2012:0106-1)
2014-06-13 00:00:00
SuSE 11.1 Security Update : ecryptfs-utils (SAT Patch Number 6187)
2013-01-25 00:00:00
veracode
veracode
Arbitrary File Write
2020-04-10 01:02:46
ubuntu
ubuntu
eCryptfs vulnerability
2011-08-23 00:00:00
fedora
fedora
[SECURITY] Fedora 16 Update: ecryptfs-utils-90-2.fc16
2011-09-30 18:54:56
[SECURITY] Fedora 15 Update: ecryptfs-utils-90-2.fc15
2011-09-14 22:33:52
[SECURITY] Fedora 14 Update: ecryptfs-utils-90-2.fc14
2011-09-14 22:31:26
securityvulns
securityvulns
[USN-1196-1] eCryptfs vulnerability
2011-08-24 00:00:00
eCryptfs multiple security vulnerabilities
2011-08-24 00:00:00
ubuntucve
ubuntucve
CVE-2011-3145
2011-08-23 00:00:00
nvd
nvd
CVE-2011-3145
2019-04-22 16:29:00
osv
osv
ecryptfs-utils - multiple
2012-01-07 00:00:00
debian
debian
[SECURITY] [DSA 2382-1] ecryptfs-utils security update
2012-01-07 18:48:38
oraclelinux
oraclelinux
ecryptfs-utils security update
2011-08-31 00:00:00
centos
centos
ecryptfs security update
2011-09-01 16:11:04
redhat
redhat
(RHSA-2011:1241) Moderate: ecryptfs-utils security update
2011-08-31 00:00:00
CVSS3
3.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L
AI Score
9.4
Confidence
High
EPSS
0.002
Percentile
59.9%
Related for CVELIST:CVE-2011-3145