CVEvulnerability

CVE-2011-1836

4.6 MEDIUM Published 2014-02-15 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2014-02-15
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-264

Description

utils/ecryptfs-recover-private in ecryptfs-utils before 90 does not establish a subdirectory with safe permissions, which might allow local users to bypass intended access restrictions via standard filesystem operations during the recovery process.

Affected configurations

• ecryptfs ecryptfs-utils (<= 89) • ecryptfs ecryptfs-utils 62 • ecryptfs ecryptfs-utils 63 • ecryptfs ecryptfs-utils 64 • ecryptfs ecryptfs-utils 65 • ecryptfs ecryptfs-utils 66 • ecryptfs ecryptfs-utils 67 • ecryptfs ecryptfs-utils 68 • ecryptfs ecryptfs-utils 69 • ecryptfs ecryptfs-utils 70 • ecryptfs ecryptfs-utils 71 • ecryptfs ecryptfs-utils 72 • ecryptfs ecryptfs-utils 73 • ecryptfs ecryptfs-utils 74 • ecryptfs ecryptfs-utils 75 • ecryptfs ecryptfs-utils 76 • ecryptfs ecryptfs-utils 77 • ecryptfs ecryptfs-utils 78 • ecryptfs ecryptfs-utils 79 • ecryptfs ecryptfs-utils 80 • ecryptfs ecryptfs-utils 81 • ecryptfs ecryptfs-utils 82 • ecryptfs ecryptfs-utils 83 • ecryptfs ecryptfs-utils 84 • ecryptfs ecryptfs-utils 85 • ecryptfs ecryptfs-utils 86 • ecryptfs ecryptfs-utils 87 • ecryptfs ecryptfs utils 58 • ecryptfs ecryptfs utils 59 • ecryptfs ecryptfs utils 60 • ecryptfs ecryptfs utils 61

Related

Weakness · not in database (1)

References