CVE-2008-5188: High severity ecryptfs-utils vulnerability

Published Nov 21, 2008

Updated

The (1) ecryptfs-setup-private, (2) ecryptfs-setup-confidential, and (3) ecryptfs-setup-pam-wrapped.sh scripts in ecryptfs-utils 45 through 61 in eCryptfs place cleartext passwords on command lines, which allows local users to obtain sensitive information by listing the process.

Affected Software

16 affected components

ecryptfs Ecryptfs Utils=49

ecryptfs Ecryptfs Utils=55

ecryptfs Ecryptfs Utils=51

ecryptfs Ecryptfs Utils=57

ecryptfs Ecryptfs Utils=47

ecryptfs Ecryptfs Utils=60

ecryptfs Ecryptfs Utils=58

ecryptfs Ecryptfs Utils=50

ecryptfs Ecryptfs Utils=61

ecryptfs Ecryptfs Utils=45

ecryptfs Ecryptfs Utils=54

ecryptfs Ecryptfs Utils=53

ecryptfs Ecryptfs Utils=46

ecryptfs Ecryptfs Utils=56

ecryptfs Ecryptfs Utils=59

ecryptfs Ecryptfs Utils=48

Event History

Nov 21, 2008

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2008-5188?

CVE-2008-5188 is considered a moderate severity vulnerability due to the cleartext exposure of sensitive information.

How do I fix CVE-2008-5188?

To fix CVE-2008-5188, update to a version of eCryptfs-utils that has addressed this vulnerability.

What systems are affected by CVE-2008-5188?

CVE-2008-5188 affects multiple versions of eCryptfs-utils, including versions 45 through 61.

What kind of information is exposed in CVE-2008-5188?

CVE-2008-5188 allows local users to access cleartext passwords placed on command lines by the affected scripts.

Who can exploit CVE-2008-5188?

CVE-2008-5188 can be exploited by local users who have sufficient permissions to list running processes.