REDHAT-BUG-731172: Medium severity Openwall eCryptfs vulnerability

Published Aug 16, 2011

Updated

Vasiliy Kulikov of Openwall and Dan Rosenberg discovered that eCryptfs incorrectly validated permissions on the requested source directory. A local attacker could use this flaw to mount an arbitrary directory, possibly leading to information disclosure.

Upstream fix: 764355487ea220fdc2faf128d577d7f679b91f97

References: https://bugs.launchpad.net/ecryptfs/+bug/732628

Affected Software

1 affected component

Openwall eCryptfs

Event History

Aug 16, 2011

Data Sourced

via Red Hat·08:14 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-731172?

The severity of REDHAT-BUG-731172 is considered high due to potential information disclosure risks.

How do I fix REDHAT-BUG-731172?

To fix REDHAT-BUG-731172, apply the upstream patch provided in the commit referenced in the bug report.

Who discovered the vulnerability REDHAT-BUG-731172?

The vulnerability REDHAT-BUG-731172 was discovered by Vasiliy Kulikov of Openwall and Dan Rosenberg.

What type of vulnerability is REDHAT-BUG-731172?

REDHAT-BUG-731172 is a permission validation flaw in eCryptfs that allows mounting arbitrary directories.

Can a remote attacker exploit REDHAT-BUG-731172?

No, REDHAT-BUG-731172 can only be exploited by a local attacker.