CVE-2011-1831
First published: Tue Aug 09 2011(Updated: )
A number of flaws were reported [1] in eCryptfs that could allow a user to mount or unmount arbitrary locations, and possibly disclose confidential information: Vasiliy Kulikov of Openwall and Dan Rosenberg discovered that eCryptfs incorrectly validated permissions on the requested mountpoint. A local attacker could use this flaw to mount to arbitrary locations, leading to privilege escalation. (<a href="https://access.redhat.com/security/cve/CVE-2011-1831">CVE-2011-1831</a>) Vasiliy Kulikov of Openwall and Dan Rosenberg discovered that eCryptfs incorrectly validated permissions on the requested mountpoint. A local attacker could use this flaw to unmount to arbitrary locations, leading to a denial of service. (<a href="https://access.redhat.com/security/cve/CVE-2011-1832">CVE-2011-1832</a>) Vasiliy Kulikov of Openwall and Dan Rosenberg discovered that eCryptfs incorrectly validated permissions on the requested source directory. A local attacker could use this flaw to mount an arbitrary directory, possibly leading to information disclosure. Note that this flaw also requires a fix in the kernel to be complete. (<a href="https://access.redhat.com/security/cve/CVE-2011-1833">CVE-2011-1833</a>) Dan Rosenberg and Marc Deslauriers discovered that eCryptfs incorrectly handled modifications to the mtab file when an error occurs. A local attacker could use this flaw to corrupt the mtab file, and possibly unmount arbitrary locations, leading to a denial of service. (<a href="https://access.redhat.com/security/cve/CVE-2011-1834">CVE-2011-1834</a>) Marc Deslauriers discovered that eCryptfs incorrectly handled keys when setting up an encrypted private directory. A local attacker could use this flaw to manipulate keys during creation of a new user. (<a href="https://access.redhat.com/security/cve/CVE-2011-1835">CVE-2011-1835</a>) Marc Deslauriers discovered that eCryptfs incorrectly handled permissions during recovery. A local attacker could use this flaw to possibly access another user's data during the recovery process. (<a href="https://access.redhat.com/security/cve/CVE-2011-1836">CVE-2011-1836</a>) Vasiliy Kulikov of Openwall discovered that eCryptfs incorrectly handled lock counters. A local attacker could use this flaw to possibly overwrite arbitrary files. (<a href="https://access.redhat.com/security/cve/CVE-2011-1837">CVE-2011-1837</a>) [1] <a href="https://launchpad.net/bugs/732628">https://launchpad.net/bugs/732628</a>
Credit: security@ubuntu.com security@ubuntu.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ecryptfs Ecryptfs-utils | =68 | |
| Ecryptfs Ecryptfs-utils | =62 | |
| Ecryptfs Ecryptfs-utils | =74 | |
| Ecryptfs Ecryptfs-utils | =87 | |
| Ecryptfs Ecryptfs-utils | =82 | |
| Ecryptfs Ecryptfs-utils | =86 | |
| Ecryptfs Ecryptfs-utils | =80 | |
| Ecryptfs Ecryptfs-utils | =65 | |
| Ecryptfs Ecryptfs-utils | =79 | |
| Ecryptfs Ecryptfs-utils | =83 | |
| Ecryptfs Ecryptfs-utils | =72 | |
| Ecryptfs Ecryptfs-utils | =69 | |
| Ecryptfs Ecryptfs-utils | =63 | |
| Ecryptfs Ecryptfs-utils | =64 | |
| Ecryptfs Ecryptfs Utils | =60 | |
| Ecryptfs Ecryptfs Utils | =58 | |
| Ecryptfs Ecryptfs-utils | =70 | |
| Ecryptfs Ecryptfs-utils | =77 | |
| Ecryptfs Ecryptfs Utils | =61 | |
| Ecryptfs Ecryptfs-utils | =76 | |
| Ecryptfs Ecryptfs-utils | =75 | |
| Ecryptfs Ecryptfs-utils | =71 | |
| Ecryptfs Ecryptfs-utils | =85 | |
| Ecryptfs Ecryptfs-utils | =78 | |
| Ecryptfs Ecryptfs-utils | <=89 | |
| Ecryptfs Ecryptfs-utils | =84 | |
| Ecryptfs Ecryptfs-utils | =67 | |
| Ecryptfs Ecryptfs-utils | =81 | |
| Ecryptfs Ecryptfs-utils | =73 | |
| Ecryptfs Ecryptfs-utils | =66 | |
| Ecryptfs Ecryptfs Utils | =59 | |
| debian/ecryptfs-utils | 111-5 111-6 111-7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://launchpad.net/ecryptfs/+download
- https://bugzilla.redhat.com/show_bug.cgi?id=729465
- http://www.ubuntu.com/usn/USN-1188-1
- http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00009.html
- https://launchpad.net/bugs/cve/CVE-2011-1831
- https://access.redhat.com/security/cve/CVE-2011-1831
- https://access.redhat.com/security/cve/CVE-2011-1832
- https://access.redhat.com/security/cve/CVE-2011-1833
- https://access.redhat.com/security/cve/CVE-2011-1834
- https://access.redhat.com/security/cve/CVE-2011-1835
- https://access.redhat.com/security/cve/CVE-2011-1836
- https://access.redhat.com/security/cve/CVE-2011-1837
- https://launchpad.net/bugs/732628
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=517480&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=517480&action=edit
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=517481&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=517481&action=edit
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=517482&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=517482&action=edit
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=517483&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=517483&action=edit
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=517484&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=517484&action=edit
- https://launchpad.net/ubuntu/+source/ecryptfs-utils/89-0ubuntu2
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=729474
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=517492&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=517492&action=edit
- https://launchpad.net/ubuntu/+source/ecryptfs-utils/83-0ubuntu3.2.10.04.1
- http://git.kernel.org/?p=linux/kernel/git/ecryptfs/ecryptfs-2.6.git;a=commit;h=764355487ea220fdc2faf128d577d7f679b91f97
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=730964
- https://rhn.redhat.com/errata/RHSA-2011-1241.html
- https://security-tracker.debian.org/tracker/CVE-2011-1831
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1831
- https://nvd.nist.gov/vuln/detail/CVE-2011-1831
- https://ubuntu.com/security/CVE-2011-1831
- collector/nvd-historical
- collector/nvd-index
- agent/type
- collector/launchpad-cve
- source/Launchpad
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2011-1831
- agent/author
- agent/severity
- agent/weakness
- collector/security-tracker-debian
- source/Debian
- agent/software-canonical-lookup
- collector/mitre-cve
- source/MITRE
- collector/usn-cve
- source/Ubuntu
- agent/references
- agent/description
- agent/softwarecombine
- agent/tags
- agent/event
- agent/first-publish-date
- collector/nvd-cve
- source/NVD
- agent/last-modified-date
- agent/trending
- vendor/ecryptfs
- canonical/ecryptfs ecryptfs-utils
- version/ecryptfs ecryptfs-utils/68
- version/ecryptfs ecryptfs-utils/62
- version/ecryptfs ecryptfs-utils/74
- version/ecryptfs ecryptfs-utils/87
- version/ecryptfs ecryptfs-utils/82
- version/ecryptfs ecryptfs-utils/86
- version/ecryptfs ecryptfs-utils/80
- version/ecryptfs ecryptfs-utils/65
- version/ecryptfs ecryptfs-utils/79
- version/ecryptfs ecryptfs-utils/83
- version/ecryptfs ecryptfs-utils/72
- version/ecryptfs ecryptfs-utils/69
- version/ecryptfs ecryptfs-utils/63
- version/ecryptfs ecryptfs-utils/64
- canonical/ecryptfs ecryptfs utils
- version/ecryptfs ecryptfs utils/60
- version/ecryptfs ecryptfs utils/58
- version/ecryptfs ecryptfs-utils/70
- version/ecryptfs ecryptfs-utils/77
- version/ecryptfs ecryptfs utils/61
- version/ecryptfs ecryptfs-utils/76
- version/ecryptfs ecryptfs-utils/75
- version/ecryptfs ecryptfs-utils/71
- version/ecryptfs ecryptfs-utils/85
- version/ecryptfs ecryptfs-utils/78
- version/ecryptfs ecryptfs-utils/89
- version/ecryptfs ecryptfs-utils/84
- version/ecryptfs ecryptfs-utils/67
- version/ecryptfs ecryptfs-utils/81
- version/ecryptfs ecryptfs-utils/73
- version/ecryptfs ecryptfs-utils/66
- version/ecryptfs ecryptfs utils/59
- package-manager/debian