Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2011-3145
HistoryApr 22, 2019 - 4:29 p.m.

CVE-2011-3145

2019-04-2216:29:00
CWE-254
[email protected]
web.nvd.nist.gov
8

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.6

Confidence

Low

EPSS

0.002

Percentile

59.9%

JSON

When mount.ecrpytfs_private before version 87-0ubuntu1.2 calls setreuid() it doesn’t also set the effective group id. So when it creates the new version, mtab.tmp, it’s created with the group id of the user running mount.ecryptfs_private.

Affected configurations

Nvd
Node
mount.ecrpytfs_private_projectmount.ecrpytfs_privateMatch-

Related

prion 1
cvelist 1
openvas 18
cve 1
veracode 1
nessus 12
debiancve 1
ubuntu 1
fedora 3
securityvulns 2
ubuntucve 1
osv 1
debian 1
centos 1
redhat 1
oraclelinux 1
prion
prion
Code injection
2019-04-22 16:29:00
cvelist
cvelist
CVE-2011-3145 mount.ecrpytfs_private sets group owner of /etc/mtab to user's primary group
2011-08-23 00:00:00
openvas
openvas
Ubuntu Update for ecryptfs-utils USN-1196-1
2011-08-27 00:00:00
SUSE: Security Advisory (SUSE-SU-2012:0682-1)
2021-06-09 00:00:00
Fedora Update for ecryptfs-utils FEDORA-2011-11871
2012-03-19 00:00:00
cve
cve
CVE-2011-3145
2019-04-22 16:29:00
veracode
veracode
Arbitrary File Write
2020-04-10 01:02:46
nessus
nessus
SuSE 11.1 Security Update : ecryptfs-utils (SAT Patch Number 6187)
2013-01-25 00:00:00
Fedora 16 : ecryptfs-utils-90-2.fc16 (2011-11871)
2011-10-03 00:00:00
Ubuntu 10.04 LTS / 10.10 / 11.04 : ecryptfs-utils vulnerability (USN-1196-1)
2011-08-24 00:00:00
debiancve
debiancve
CVE-2011-3145
2019-04-22 16:29:00
ubuntu
ubuntu
eCryptfs vulnerability
2011-08-23 00:00:00
fedora
fedora
[SECURITY] Fedora 16 Update: ecryptfs-utils-90-2.fc16
2011-09-30 18:54:56
[SECURITY] Fedora 15 Update: ecryptfs-utils-90-2.fc15
2011-09-14 22:33:52
[SECURITY] Fedora 14 Update: ecryptfs-utils-90-2.fc14
2011-09-14 22:31:26
securityvulns
securityvulns
[USN-1196-1] eCryptfs vulnerability
2011-08-24 00:00:00
eCryptfs multiple security vulnerabilities
2011-08-24 00:00:00
ubuntucve
ubuntucve
CVE-2011-3145
2011-08-23 00:00:00
osv
osv
ecryptfs-utils - multiple
2012-01-07 00:00:00
debian
debian
[SECURITY] [DSA 2382-1] ecryptfs-utils security update
2012-01-07 18:48:38
centos
centos
ecryptfs security update
2011-09-01 16:11:04
redhat
redhat
(RHSA-2011:1241) Moderate: ecryptfs-utils security update
2011-08-31 00:00:00
oraclelinux
oraclelinux
ecryptfs-utils security update
2011-08-31 00:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.6

Confidence

Low

EPSS

0.002

Percentile

59.9%

JSON
Related for NVD:CVE-2011-3145
prion1cvelist1openvas18cve1veracode1nessus12debiancve1ubuntu1fedora3securityvulns2ubuntucve1osv1debian1centos1redhat1oraclelinux1