Skip to content
OpenAdvisories
Low RHSA-2011:1241 6 CVEs

Red Hat Security Advisory: ecryptfs-utils security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 14

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client ecryptfs-utils 0:75-5.el5_7.2
Red Hat · RHEL 5 enterprise_linux:5::client ecryptfs-utils-debuginfo 0:75-5.el5_7.2
Red Hat · RHEL 5 enterprise_linux:5::client ecryptfs-utils-gui 0:75-5.el5_7.2
Red Hat · RHEL 5 enterprise_linux:5::client_workstation ecryptfs-utils 0:75-5.el5_7.2
Red Hat · RHEL 5 enterprise_linux:5::client_workstation ecryptfs-utils-debuginfo 0:75-5.el5_7.2
Red Hat · RHEL 5 enterprise_linux:5::client_workstation ecryptfs-utils-devel 0:75-5.el5_7.2
Red Hat · RHEL 5 enterprise_linux:5::server ecryptfs-utils 0:75-5.el5_7.2
Red Hat · RHEL 5 enterprise_linux:5::server ecryptfs-utils-debuginfo 0:75-5.el5_7.2
Red Hat · RHEL 5 enterprise_linux:5::server ecryptfs-utils-devel 0:75-5.el5_7.2
Red Hat · RHEL 5 enterprise_linux:5::server ecryptfs-utils-gui 0:75-5.el5_7.2
Red Hat · RHEL 6 enterprise_linux:6::server ecryptfs-utils 0:82-6.el6_1.3
Red Hat · RHEL 6 enterprise_linux:6::server ecryptfs-utils-debuginfo 0:82-6.el6_1.3
Red Hat · RHEL 6 enterprise_linux:6::server ecryptfs-utils-devel 0:82-6.el6_1.3
Red Hat · RHEL 6 enterprise_linux:6::server ecryptfs-utils-python 0:82-6.el6_1.3

Vulnerabilities 6

  • Low 3.8
    CVE-2011-3145

    mount.ecrpytfs_private sets group owner of /etc/mtab to user's primary group

    When mount.ecrpytfs_private before version 87-0ubuntu1.2 calls setreuid() it doesn't also set the effective group id. So when it creates the new version, mtab.tmp, it's created with the group id of the user running mount.ecryptfs_private.

    ecryptfs-utils Debian
  • Unscored —
    CVE-2011-1831

    utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, which allows…

    ecryptfs-utils Debian
  • Unscored —
    CVE-2011-1832

    utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, which allows…

    ecryptfs-utils Debian
  • Unscored —
    CVE-2011-1834

    utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly maintain the mtab file during error condit…

    ecryptfs-utils Debian
  • Unscored —
    CVE-2011-1835

    The encrypted private-directory setup process in utils/ecryptfs-setup-private in ecryptfs-utils before 90 does not prop…

    ecryptfs-utils Debian
  • Unscored —
    CVE-2011-1837

    The lock-counter implementation in utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 allows local users to ove…

    ecryptfs-utils Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/support/offerings/techpreview/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=729465
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=732607
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1241.json
  • report
    https://access.redhat.com/security/cve/CVE-2011-1831
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-1831
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-1831
  • report
    https://access.redhat.com/security/cve/CVE-2011-1832
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-1832
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-1832
  • report
    https://access.redhat.com/security/cve/CVE-2011-1834
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-1834
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-1834
  • report
    https://access.redhat.com/security/cve/CVE-2011-1835
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-1835
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-1835
  • report
    https://access.redhat.com/security/cve/CVE-2011-1837
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-1837
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-1837
  • report
    https://access.redhat.com/security/cve/CVE-2011-3145
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-3145
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-3145