SuSE 11.1 Security Update : ecryptfs-utils (SAT Patch Number 4956)

This update of ecryptfs-utils fixes several security problems : - Race condition when checking mountpoint during mount. CVE-2011-1831 - Race condition when checking mountpoint during unmount. CVE-2011-1832 - Race condition when checking source during mount. CVE-2011-1833 - Improper mtab handling...

CVE-2011-1831

utils/mount.ecryptfsprivate.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, which allows local users to effectively replace any directory with a new filesystem, and consequently gain privileges, via a mount system call...

CVE-2011-1836

utils/ecryptfs-recover-private in ecryptfs-utils before 90 does not establish a subdirectory with safe permissions, which might allow local users to bypass intended access restrictions via standard filesystem operations during the recovery process...

CVE-2011-1834

utils/mount.ecryptfsprivate.c in ecryptfs-utils before 90 does not properly maintain the mtab file during error conditions, which allows local users to cause a denial of service table corruption or bypass intended unmounting restrictions via a umount system call...

CVE-2011-1837

The lock-counter implementation in utils/mount.ecryptfsprivate.c in ecryptfs-utils before 90 allows local users to overwrite arbitrary files via unspecified vectors...

CentOS 5 : ecryptfs-utils (CESA-2009:1307)

Updated ecryptfs-utils packages that fix a security issue, various bugs, and add enhancements are now available for Red Hat Enterprise Linux 5. This update has been rated as having low security impact by the Red Hat Security Response Team. eCryptfs is a stacked, cryptographic file system. It is...

CentOS Security Advisory CESA-2009:1307 (ecryptfs-utils)

The remote host is missing updates to ecryptfs-utils announced in advisory CESA-2009:1307. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

CentOS Security Advisory CESA-2009:1307 (ecryptfs-utils)

The remote host is missing updates to ecryptfs-utils announced in advisory CESA-2009:1307. CESA-2009:1307 64933 2 $Id: ovcesa20091307.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:1307 ecryptfs-utils Authors: Thomas Reinke Copyright: Copyright c 200...

ecryptfs-utils security, bug fix, and enhancement update

75-4 - fix EOF handling 499367 - add icon to gui desktop file 75-3 - ask for password confirmation when creating openssl key 500850 - removed executable permission from ecryptfs-dot-private 500817 - ecryptfs-rewrite-file: improve of progress output 500813 - dont error out when unwrapping and addi...

CVE-2009-1296

The CVE-2009-1296 case concerns the eCryptfs utilities (ecryptfs-utils) version 73-0ubuntu6.1 on Ubuntu 9.04, where the mount passphrase is stored in installation logs. The logs are root-readable, so a local attacker could read the log files on disk and obtain the passphrase, potentially gaining ...

Ubuntu USN-783-1 (ecryptfs-utils)

The remote host is missing an update to ecryptfs-utils announced via advisory USN-783-1. OpenVAS Vulnerability Test $Id: ubuntu7831.nasl 8616 2018-02-01 08:24:13Z cfischer $ $Id: ubuntu7831.nasl 8616 2018-02-01 08:24:13Z cfischer $ Description: Auto-generated from advisory USN-783-1 ecryptfs-util...

CVE-2009-1296: Exposure of Sensitive Information to an Unauthorized Actor

The eCryptfs support utilities ecryptfs-utils 73-0ubuntu6.1 on Ubuntu 9.04 stores the mount passphrase in installation logs, which might allow local users to obtain access to the filesystem by reading the log files from disk. NOTE: the log files are only readable by root...

Ubuntu: Security Advisory (USN-783-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-5188: Undefined Security Weakness

The 1 ecryptfs-setup-private, 2 ecryptfs-setup-confidential, and 3 ecryptfs-setup-pam-wrapped.sh scripts in ecryptfs-utils 45 through 61 in eCryptfs place cleartext passwords on command lines, which allows local users to obtain sensitive information by listing the process...