Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Debian · 5.0 | ecryptfs-utils | 68-1+lenny1 |
| Debian · 6.0 | ecryptfs-utils | 83-4+squeeze1 |
Vulnerabilities 6
-
Low 3.8
mount.ecrpytfs_private sets group owner of /etc/mtab to user's primary group
When mount.ecrpytfs_private before version 87-0ubuntu1.2 calls setreuid() it doesn't also set the effective group id. So when it creates the new version, mtab.tmp, it's created with the group id of the user running mount.ecryptfs_private.
-
Unscored —
utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, which allows…
-
Unscored —
utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, which allows…
-
Unscored —
utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly maintain the mtab file during error condit…
-
Unscored —
The encrypted private-directory setup process in utils/ecryptfs-setup-private in ecryptfs-utils before 90 does not prop…
-
Unscored —
The lock-counter implementation in utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 allows local users to ove…