Vulnerabilities
Misconfiguration
Runtime Security
Compliance
CVE Vulnerabilities

CVE-2011-1832

Published: Feb 15, 2014 | Modified: Mar 08, 2014
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
2.1 LOW
AV:L/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
4.6 MODERATE
AV:L/AC:L/Au:N/C:P/I:P/A:P
RedHat/V3
Ubuntu
Additional information
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2011-1832
CWEhttps://cwe.mitre.org/data/definitions/264.html

utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, which allows local users to remove directories via a umount system call.

Affected Software

Name Vendor Start Version End Version
Ecryptfs-utils Ecryptfs 62 62
Ecryptfs-utils Ecryptfs 63 63
Ecryptfs-utils Ecryptfs 64 64
Ecryptfs-utils Ecryptfs 65 65
Ecryptfs-utils Ecryptfs 66 66
Ecryptfs-utils Ecryptfs 67 67
Ecryptfs-utils Ecryptfs 68 68
Ecryptfs-utils Ecryptfs 69 69
Ecryptfs-utils Ecryptfs 70 70
Ecryptfs-utils Ecryptfs 71 71
Ecryptfs-utils Ecryptfs 72 72
Ecryptfs-utils Ecryptfs 73 73
Ecryptfs-utils Ecryptfs 74 74
Ecryptfs-utils Ecryptfs 75 75
Ecryptfs-utils Ecryptfs 76 76
Ecryptfs-utils Ecryptfs 77 77
Ecryptfs-utils Ecryptfs 78 78
Ecryptfs-utils Ecryptfs 79 79
Ecryptfs-utils Ecryptfs 80 80
Ecryptfs-utils Ecryptfs 81 81
Ecryptfs-utils Ecryptfs 82 82
Ecryptfs-utils Ecryptfs 83 83
Ecryptfs-utils Ecryptfs 84 84
Ecryptfs-utils Ecryptfs 85 85
Ecryptfs-utils Ecryptfs 86 86
Ecryptfs-utils Ecryptfs 87 87
Ecryptfs-utils Ecryptfs * 89
Ecryptfs_utils Ecryptfs 58 58
Ecryptfs_utils Ecryptfs 59 59
Ecryptfs_utils Ecryptfs 60 60
Ecryptfs_utils Ecryptfs 61 61
Red Hat Enterprise Linux 5 RedHat ecryptfs-utils-0:75-5.el5_7.2 *
Red Hat Enterprise Linux 6 RedHat ecryptfs-utils-0:82-6.el6_1.3 *
Ecryptfs-utils Ubuntu devel *
Ecryptfs-utils Ubuntu lucid *
Ecryptfs-utils Ubuntu maverick *
Ecryptfs-utils Ubuntu natty *

References

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.
Copyright © 2023 Aqua Security Software Ltd.   Privacy Policy | Terms of Use