CVE-2007-1738: Undefined Security Weakness

TrueCrypt 4.3, when installed setuid root, allows local users to cause a denial of service filesystem unavailability or gain privileges by mounting a crafted TrueCrypt volume, as demonstrated using 1 /usr/bin or 2 another user's home directory, a different issue than CVE-2007-1589...

Denial of Service Vulnerabilities in TrueCrypt 4.3 Linux (re. bid 23180)

TrueCrypt 4.3 for Linux from http://www.truecrypt.org/ It seems to be possible to perform various denial of service attacks on a Linux computer running TrueCrypt in set-uid root mode, or possible introduce evil binaries into normally trusted locations. I tested this on the latest version, 4.3,...

Truecrypt privilege escalation

In suid mode it's possible for user to mount crypted filesystem to any directory...

Code injection

TrueCrypt before 4.3, when set-euid mode is used on Linux, allows local users to cause a denial of service filesystem unavailability by dismounting a volume mounted by a different user...

CVE-2007-1589

TrueCrypt before 4.3, when set-euid mode is used on Linux, allows local users to cause a denial of service filesystem unavailability by dismounting a volume mounted by a different user...

CVE-2007-1589

TrueCrypt before 4.3, when set-euid mode is used on Linux, allows local users to cause a denial of service filesystem unavailability by dismounting a volume mounted by a different user...

CVE-2007-1589

Technical details for CVE-2007-1589 are not publicly available in the provided documents. No concrete product/version/root-cause/impact data is supplied beyond the initial description; monitor for updates from official advisories before assessment.

CVE-2007-1589: Undefined Security Weakness

TrueCrypt before 4.3, when set-euid mode is used on Linux, allows local users to cause a denial of service filesystem unavailability by dismounting a volume mounted by a different user...

Design/Logic Flaw

Untrusted search path vulnerability in Truecrypt 4.1, when running suid root on Linux, allows local users to execute arbitrary commands and gain privileges via a modified PATH environment variable that references a malicious mount command...

CVE-2006-2183

Untrusted search path vulnerability in Truecrypt 4.1, when running suid root on Linux, allows local users to execute arbitrary commands and gain privileges via a modified PATH environment variable that references a malicious mount command...

CVE-2006-2183

Untrusted search path vulnerability in Truecrypt 4.1, when running suid root on Linux, allows local users to execute arbitrary commands and gain privileges via a modified PATH environment variable that references a malicious mount command...

CVE-2006-2183

CVE-2006-2183 affects TrueCrypt 4.1 on Linux when running as a set-user-ID root process. The vulnerability arises from an untrusted search path: a modified PATH environment variable referencing a malicious mount command could allow local users to execute arbitrary commands and gain privileges. Th...

CVE-2006-2183: Undefined Security Weakness

Untrusted search path vulnerability in Truecrypt 4.1, when running suid root on Linux, allows local users to execute arbitrary commands and gain privileges via a modified PATH environment variable that references a malicious mount command...

Multiple Vendor BIOS - Keyboard Buffer Password Persistence (2)

Multiple Vendor BIOS - Keyboard Buffer Password Persistence 2 // source: https://www.securityfocus.com/bid/15751/info Multiple vendors fail to clear the BIOS Basic Input-Output System keyboard buffer after reading the preboot authentication password during the system startup process. Depending on...

Multiple Vendor BIOS - Keyboard Buffer Password Persistence (1)

Multiple Vendor BIOS - Keyboard Buffer Password Persistence 1 source: https://www.securityfocus.com/bid/15751/info Multiple vendors fail to clear the BIOS Basic Input-Output System keyboard buffer after reading the preboot authentication password during the system startup process. Depending on th...

Multiple Vendor BIOS - Keyboard Buffer Password Persistence (1)

source: https://www.securityfocus.com/bid/15751/info Multiple vendors fail to clear the BIOS Basic Input-Output System keyboard buffer after reading the preboot authentication password during the system startup process. Depending on the operating system running on affected computers, the memory...

Multiple Vendor BIOS - Keyboard Buffer Password Persistence (2)

// source: https://www.securityfocus.com/bid/15751/info Multiple vendors fail to clear the BIOS Basic Input-Output System keyboard buffer after reading the preboot authentication password during the system startup process. Depending on the operating system running on affected computers, the memor...