RHEL 5 / 6 : ecryptfs-utils (RHSA-2011:1241)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1241 advisory. - ecryptfs: multiple flaws to mount/umount arbitrary locations and possibly disclose confidential information CVE-2011-1831,...

ecryptfs: multiple flaws to mount/umount arbitrary locations and possibly disclose confidential information

utils/mount.ecryptfsprivate.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, which allows local users to effectively replace any directory with a new filesystem, and consequently gain privileges, via a mount system call...

ecryptfs: multiple flaws to mount/umount arbitrary locations and possibly disclose confidential information

utils/mount.ecryptfsprivate.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, which allows local users to remove directories via a umount system call...

ecryptfs: multiple flaws to mount/umount arbitrary locations and possibly disclose confidential information

utils/mount.ecryptfsprivate.c in ecryptfs-utils before 90 does not properly maintain the mtab file during error conditions, which allows local users to cause a denial of service table corruption or bypass intended unmounting restrictions via a umount system call...

ecryptfs-utils: incorrect mtab group ownership

When mount.ecrpytfsprivate before version 87-0ubuntu1.2 calls setreuid it doesn't also set the effective group id. So when it creates the new version, mtab.tmp, it's created with the group id of the user running mount.ecryptfsprivate...

Moderate: Red Hat Security Advisory: ecryptfs-utils security update

Updated ecryptfs-utils packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

PT-2011-1086

Name of the Vulnerable Software and Affected Versions ecryptfs-utils-devel versions 75 through 82 ecryptfs-utils versions 75 through 82 ecryptfs-utils-gui versions 75 ecryptfs-utils-debuginfo versions 82 Description The issue concerns multiple vulnerabilities in the ecryptfs-utils package, which...

Ubuntu Update for ecryptfs-utils USN-1196-1

Ubuntu Update for Linux kernel vulnerabilities USN-1196-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11961.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for ecryptfs-utils USN-1196-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.n...

Ubuntu: Security Advisory (USN-1196-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

eCryptfs multiple security vulnerabilities

Privilege escalation, information leakage...

[USN-1196-1] eCryptfs vulnerability

========================================================================== Ubuntu Security Notice USN-1196-1 August 23, 2011 ecryptfs-utils vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivative...

Ubuntu 10.04 LTS / 10.10 / 11.04 : ecryptfs-utils vulnerability (USN-1196-1)

It was discovered that eCryptfs incorrectly handled permissions when modifying the mtab file. A local attacker could use this flaw to manipulate the mtab file, and possibly unmount arbitrary locations, leading to a denial of service. Note that Tenable Network Security has extracted the preceding...

Ubuntu Fixes WebKit Flaws, Other Issues With Updates

Ubuntu has fixed a pile of security vulnerabilities in some of its current releases, including 22 vulnerabilities in the WebKit framework that’s part of the operating system. The WebKit flaws include some issues that could be exploited by remote attackers to run code on vulnerable machines. The...

USN-1196-1: eCryptfs vulnerability

It was discovered that eCryptfs incorrectly handled permissions when modifying the mtab file. A local attacker could use this flaw to manipulate the mtab file, and possibly unmount arbitrary locations, leading to a denial of service...

ecryptfs-utils: Update to fix various symlink race attacks (important)

This update of ecryptfs-utils fixes several security problems: - CVE-2011-1831 - Race condition when checking mountpoint during mount. - CVE-2011-1832 - Race condition when checking mountpoint during unmount. - CVE-2011-1833 - Race condition when checking source during mount. - CVE-2011-1834 -...

Ubuntu Update for ecryptfs-utils USN-1188-1

Ubuntu Update for Linux kernel vulnerabilities USN-1188-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11881.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for ecryptfs-utils USN-1188-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.n...

SuSE 11.1 Security Update : ecryptfs-utils (SAT Patch Number 4956)

This update of ecryptfs-utils fixes several security problems : - Race condition when checking mountpoint during mount. CVE-2011-1831 - Race condition when checking mountpoint during unmount. CVE-2011-1832 - Race condition when checking source during mount. CVE-2011-1833 - Improper mtab handling...

Ubuntu: Security Advisory (USN-1188-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[USN-1188-1] eCryptfs vulnerabilities

========================================================================== Ubuntu Security Notice USN-1188-1 August 09, 2011 ecryptfs-utils vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its...

Ubuntu 10.04 LTS / 10.10 / 11.04 : ecryptfs-utils vulnerabilities (USN-1188-1)

Vasiliy Kulikov and Dan Rosenberg discovered that eCryptfs incorrectly validated permissions on the requested mountpoint. A local attacker could use this flaw to mount to arbitrary locations, leading to privilege escalation. CVE-2011-1831 Vasiliy Kulikov and Dan Rosenberg discovered that eCryptfs...