CVE-2011-1835

Related Files

Debian Security Advisory 2382-1

Posted Jan 9, 2012

Authored by Debian | Site debian.org

Debian Linux Security Advisory 2382-1 - Several problems have been discovered in ecryptfs-utils, a cryptographic filesystem for Linux.

tags | advisory

systems | linux, debian

advisories | CVE-2011-1831, CVE-2011-1832, CVE-2011-1834, CVE-2011-1835, CVE-2011-1837, CVE-2011-3145

SHA-256 | 7f3fba9fb2a1cbc606e25d39de03a150254f1845a6b7f75e8a065d1aa8c34661

Download | Favorite | View

Red Hat Security Advisory 2011-1241-01

Posted Aug 31, 2011

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2011-1241-01 - eCryptfs is a stacked, cryptographic file system. It is transparent to the underlying file system and provides per-file granularity. eCryptfs is released as a Technology Preview for Red Hat Enterprise Linux 5 and 6. The setuid mount.ecryptfs_private utility allows users to mount an eCryptfs file system. This utility can only be run by users in the "ecryptfs" group. A race condition flaw was found in the way mount.ecryptfs_private checked the permissions of a requested mount point when mounting an encrypted file system. A local attacker could possibly use this flaw to escalate their privileges by mounting over an arbitrary directory.

tags | advisory, arbitrary, local

systems | linux, redhat

advisories | CVE-2011-1831, CVE-2011-1832, CVE-2011-1834, CVE-2011-1835, CVE-2011-1837, CVE-2011-3145

SHA-256 | 6c5fc7a1ef62462fd1abff6cb7503e6efebb23451416bf6378dfd2e8325605e1

Download | Favorite | View

Ubuntu Security Notice USN-1188-1

Posted Aug 10, 2011

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 1188-1 - Vasiliy Kulikov and Dan Rosenberg discovered that eCryptfs incorrectly validated permissions on the requested mountpoint. A local attacker could use this flaw to mount to arbitrary locations, leading to privilege escalation. Vasiliy Kulikov and Dan Rosenberg discovered that eCryptfs incorrectly validated permissions on the requested mountpoint. A local attacker could use this flaw to unmount to arbitrary locations, leading to a denial of service. Various other issues were also addressed.

tags | advisory, denial of service, arbitrary, local

systems | linux, ubuntu

advisories | CVE-2011-1831, CVE-2011-1832, CVE-2011-1833, CVE-2011-1834, CVE-2011-1835, CVE-2011-1836, CVE-2011-1837

SHA-256 | fe2f44aca4f4d78e3767514f59f7522f711afb4689ded54a89988c06b03f35e8

Download | Favorite | View