CVE-2009-1296: Infoleak
The eCryptfs support utilities (ecryptfs-utils) 73-0ubuntu6.1 on Ubuntu 9.04 stores the mount passphrase in installation logs, which might allow local users to obtain access to the filesystem by reading the log files from disk. NOTE: the log files are only readable by root.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1296?
CVE-2009-1296 is considered to have a moderate severity due to the potential for local users to access sensitive information.
How do I fix CVE-2009-1296?
To fix CVE-2009-1296, ensure that log files containing the mount passphrase are secured and consider updating the eCryptfs utilities to a version that does not store sensitive information in logs.
Who is affected by CVE-2009-1296?
CVE-2009-1296 affects users of eCryptfs support utilities on Ubuntu 9.04, specifically those running version 73-0ubuntu6.1.
What is eCryptfs in relation to CVE-2009-1296?
eCryptfs is a stacked cryptographic filesystem for Linux which, in the context of CVE-2009-1296, contains vulnerabilities related to the logging of mount passphrases.
Are log files impacted by CVE-2009-1296 readable by all users?
No, the log files affected by CVE-2009-1296 are only readable by root users, but a compromised root could exploit this vulnerability.