3 matches found
Denial Of Service (DoS)
encryptfs-utils is vulnerable to denial of service. It was found that mount.ecryptfsprivate did not handle certain errors correctly when updating the mtab mounted file systems table file, allowing a local attacker to corrupt the mtab file and possibly unmount an arbitrary file system...
Access Control Bypass
encryptfs-utils is vulnerable to access control bypass. An insecure temporary file use flaw was found in the ecryptfs-setup-private script. A local attacker could use this script to insert their own key that will subsequently be used by a new user, possibly giving the attacker access to the user'...
Privilege Escalation
encryptfs-utils is vulnerable to privilege escalation. A race condition flaw was found in the way mount.ecryptfsprivate checked the permissions of a requested mount point when mounting an encrypted file system. A local attacker could possibly use this flaw to escalate their privileges by mounting...