ecryptfs ecryptfs-utils 70 vulnerabilities and exploits

(subscribe to this query)

utils/mount.ecryptfs_private.c in ecryptfs-utils prior to 90 does not properly check mountpoint permissions, which allows local users to effectively replace any directory with a new filesystem, and consequently gain privileges, via a mount system call.

utils/mount.ecryptfs_private.c in ecryptfs-utils prior to 90 does not properly maintain the mtab file during error conditions, which allows local users to cause a denial of service (table corruption) or bypass intended unmounting restrictions via a umount system call.

The encrypted private-directory setup process in utils/ecryptfs-setup-private in ecryptfs-utils prior to 90 does not properly ensure that the passphrase file is created, which might allow local users to bypass intended access restrictions at a certain time in the new-user creatio...

utils/ecryptfs-recover-private in ecryptfs-utils prior to 90 does not establish a subdirectory with safe permissions, which might allow local users to bypass intended access restrictions via standard filesystem operations during the recovery process.

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook