14 results · Feed
-
Unscored —
ecryptfs-utils: suid helper does not restrict mounting filesystems with nosuid,nodev which creates a possible privilege…
-
Low 3.8
mount.ecrpytfs_private sets group owner of /etc/mtab to user's primary group
When mount.ecrpytfs_private before version 87-0ubuntu1.2 calls setreuid() it doesn't also set the effective group id. So when it creates the new version, mtab.tmp, it's created with the group id of the user running mount.ecryptfs_private.
-
Unscored —
ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from activating during boot …
-
Unscored —
mount.ecryptfs_private.c in eCryptfs-utils does not validate mount destination filesystem types, which allows local use…
-
Unscored —
eCryptfs 104 and earlier uses a default salt to encrypt the mount passphrase, which makes it easier for attackers to ob…
-
Unscored —
The encrypted private-directory setup process in utils/ecryptfs-setup-private in ecryptfs-utils before 90 does not prop…
-
Unscored —
utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, which allows…
-
Unscored —
utils/ecryptfs-recover-private in ecryptfs-utils before 90 does not establish a subdirectory with safe permissions, whi…
-
Unscored —
utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, which allows…
-
Unscored —
The lock-counter implementation in utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 allows local users to ove…
-
Unscored —
utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly maintain the mtab file during error condit…
-
Unscored —
Race condition in the ecryptfs_mount function in fs/ecryptfs/main.c in the eCryptfs subsystem in the Linux kernel befor…
-
Unscored —
The eCryptfs support utilities (ecryptfs-utils) 73-0ubuntu6.1 on Ubuntu 9.04 stores the mount passphrase in installatio…
-
Unscored —
The (1) ecryptfs-setup-private, (2) ecryptfs-setup-confidential, and (3) ecryptfs-setup-pam-wrapped.sh scripts in ecryp…