4.6

CVE-2011-1836

utils/ecryptfs-recover-private in ecryptfs-utils before 90 does not establish a subdirectory with safe permissions, which might allow local users to bypass intended access restrictions via standard filesystem operations during the recovery process.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ecryptfs ≫ Ecryptfs-utils Version <= 89
Ecryptfs ≫ Ecryptfs-utils Version 62
Ecryptfs ≫ Ecryptfs-utils Version 63
Ecryptfs ≫ Ecryptfs-utils Version 64
Ecryptfs ≫ Ecryptfs-utils Version 65
Ecryptfs ≫ Ecryptfs-utils Version 66
Ecryptfs ≫ Ecryptfs-utils Version 67
Ecryptfs ≫ Ecryptfs-utils Version 68
Ecryptfs ≫ Ecryptfs-utils Version 69
Ecryptfs ≫ Ecryptfs-utils Version 70
Ecryptfs ≫ Ecryptfs-utils Version 71
Ecryptfs ≫ Ecryptfs-utils Version 72
Ecryptfs ≫ Ecryptfs-utils Version 73
Ecryptfs ≫ Ecryptfs-utils Version 74
Ecryptfs ≫ Ecryptfs-utils Version 75
Ecryptfs ≫ Ecryptfs-utils Version 76
Ecryptfs ≫ Ecryptfs-utils Version 77
Ecryptfs ≫ Ecryptfs-utils Version 78
Ecryptfs ≫ Ecryptfs-utils Version 79
Ecryptfs ≫ Ecryptfs-utils Version 80
Ecryptfs ≫ Ecryptfs-utils Version 81
Ecryptfs ≫ Ecryptfs-utils Version 82
Ecryptfs ≫ Ecryptfs-utils Version 83
Ecryptfs ≫ Ecryptfs-utils Version 84
Ecryptfs ≫ Ecryptfs-utils Version 85
Ecryptfs ≫ Ecryptfs-utils Version 86
Ecryptfs ≫ Ecryptfs-utils Version 87
Ecryptfs ≫ Ecryptfs Utils Version 58
Ecryptfs ≫ Ecryptfs Utils Version 59
Ecryptfs ≫ Ecryptfs Utils Version 60
Ecryptfs ≫ Ecryptfs Utils Version 61
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.38% 0.294
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00009.html
http://www.ubuntu.com/usn/USN-1188-1
https://bugzilla.redhat.com/show_bug.cgi?id=729465
Vendor Advisory
https://launchpad.net/ecryptfs/+download