CVE-2011-1831
ecryptfs: multiple flaws to mount/umount arbitrary locations and possibly disclose confidential information
Severity Score
4.6
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, which allows local users to effectively replace any directory with a new filesystem, and consequently gain privileges, via a mount system call.
utils/mount.ecryptfs_private.c en ecryptfs-utils anterior a 90 no comprueba debidamente los permisos del punto de montaje, lo que permite a usuarios locales reemplazar efectivamente cualquier directorio con un sistema de archivos nuevo, y en consecuencia ganar privilegios, a través de una llamada al sistema mount.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2011-04-27 CVE Reserved
- 2011-08-10 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-264: Permissions, Privileges, and Access Controls
CAPEC
References (5)
| URL | Tag | Source |
|---|---|---|
| https://launchpad.net/ecryptfs/+download | X_refsource_confirm |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00009.html | 2014-03-08 | |
| http://www.ubuntu.com/usn/USN-1188-1 | 2014-03-08 | |
| https://bugzilla.redhat.com/show_bug.cgi?id=729465 | 2011-08-31 | |
| https://access.redhat.com/security/cve/CVE-2011-1831 | 2011-08-31 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Ecryptfs Search vendor "Ecryptfs" | Ecryptfs-utils Search vendor "Ecryptfs" for product "Ecryptfs-utils" | <= 89 Search vendor "Ecryptfs" for product "Ecryptfs-utils" and version " <= 89" | - |
Affected
| ||||||
| Ecryptfs Search vendor "Ecryptfs" | Ecryptfs-utils Search vendor "Ecryptfs" for product "Ecryptfs-utils" | 62 Search vendor "Ecryptfs" for product "Ecryptfs-utils" and version "62" | - |
Affected
| ||||||
| Ecryptfs Search vendor "Ecryptfs" | Ecryptfs-utils Search vendor "Ecryptfs" for product "Ecryptfs-utils" | 63 Search vendor "Ecryptfs" for product "Ecryptfs-utils" and version "63" | - |
Affected
| ||||||
| Ecryptfs Search vendor "Ecryptfs" | Ecryptfs-utils Search vendor "Ecryptfs" for product "Ecryptfs-utils" | 64 Search vendor "Ecryptfs" for product "Ecryptfs-utils" and version "64" | - |
Affected
| ||||||
| Ecryptfs Search vendor "Ecryptfs" | Ecryptfs-utils Search vendor "Ecryptfs" for product "Ecryptfs-utils" | 65 Search vendor "Ecryptfs" for product "Ecryptfs-utils" and version "65" | - |
Affected
| ||||||
| Ecryptfs Search vendor "Ecryptfs" | Ecryptfs-utils Search vendor "Ecryptfs" for product "Ecryptfs-utils" | 66 Search vendor "Ecryptfs" for product "Ecryptfs-utils" and version "66" | - |
Affected
| ||||||
| Ecryptfs Search vendor "Ecryptfs" | Ecryptfs-utils Search vendor "Ecryptfs" for product "Ecryptfs-utils" | 67 Search vendor "Ecryptfs" for product "Ecryptfs-utils" and version "67" | - |
Affected
| ||||||
| Ecryptfs Search vendor "Ecryptfs" | Ecryptfs-utils Search vendor "Ecryptfs" for product "Ecryptfs-utils" | 68 Search vendor "Ecryptfs" for product "Ecryptfs-utils" and version "68" | - |
Affected
| ||||||
| Ecryptfs Search vendor "Ecryptfs" | Ecryptfs-utils Search vendor "Ecryptfs" for product "Ecryptfs-utils" | 69 Search vendor "Ecryptfs" for product "Ecryptfs-utils" and version "69" | - |
Affected
| ||||||
| Ecryptfs Search vendor "Ecryptfs" | Ecryptfs-utils Search vendor "Ecryptfs" for product "Ecryptfs-utils" | 70 Search vendor "Ecryptfs" for product "Ecryptfs-utils" and version "70" | - |
Affected
| ||||||
| Ecryptfs Search vendor "Ecryptfs" | Ecryptfs-utils Search vendor "Ecryptfs" for product "Ecryptfs-utils" | 71 Search vendor "Ecryptfs" for product "Ecryptfs-utils" and version "71" | - |
Affected
| ||||||
| Ecryptfs Search vendor "Ecryptfs" | Ecryptfs-utils Search vendor "Ecryptfs" for product "Ecryptfs-utils" | 72 Search vendor "Ecryptfs" for product "Ecryptfs-utils" and version "72" | - |
Affected
| ||||||
| Ecryptfs Search vendor "Ecryptfs" | Ecryptfs-utils Search vendor "Ecryptfs" for product "Ecryptfs-utils" | 73 Search vendor "Ecryptfs" for product "Ecryptfs-utils" and version "73" | - |
Affected
| ||||||
| Ecryptfs Search vendor "Ecryptfs" | Ecryptfs-utils Search vendor "Ecryptfs" for product "Ecryptfs-utils" | 74 Search vendor "Ecryptfs" for product "Ecryptfs-utils" and version "74" | - |
Affected
| ||||||
| Ecryptfs Search vendor "Ecryptfs" | Ecryptfs-utils Search vendor "Ecryptfs" for product "Ecryptfs-utils" | 75 Search vendor "Ecryptfs" for product "Ecryptfs-utils" and version "75" | - |
Affected
| ||||||
| Ecryptfs Search vendor "Ecryptfs" | Ecryptfs-utils Search vendor "Ecryptfs" for product "Ecryptfs-utils" | 76 Search vendor "Ecryptfs" for product "Ecryptfs-utils" and version "76" | - |
Affected
| ||||||
| Ecryptfs Search vendor "Ecryptfs" | Ecryptfs-utils Search vendor "Ecryptfs" for product "Ecryptfs-utils" | 77 Search vendor "Ecryptfs" for product "Ecryptfs-utils" and version "77" | - |
Affected
| ||||||
| Ecryptfs Search vendor "Ecryptfs" | Ecryptfs-utils Search vendor "Ecryptfs" for product "Ecryptfs-utils" | 78 Search vendor "Ecryptfs" for product "Ecryptfs-utils" and version "78" | - |
Affected
| ||||||
| Ecryptfs Search vendor "Ecryptfs" | Ecryptfs-utils Search vendor "Ecryptfs" for product "Ecryptfs-utils" | 79 Search vendor "Ecryptfs" for product "Ecryptfs-utils" and version "79" | - |
Affected
| ||||||
| Ecryptfs Search vendor "Ecryptfs" | Ecryptfs-utils Search vendor "Ecryptfs" for product "Ecryptfs-utils" | 80 Search vendor "Ecryptfs" for product "Ecryptfs-utils" and version "80" | - |
Affected
| ||||||
| Ecryptfs Search vendor "Ecryptfs" | Ecryptfs-utils Search vendor "Ecryptfs" for product "Ecryptfs-utils" | 81 Search vendor "Ecryptfs" for product "Ecryptfs-utils" and version "81" | - |
Affected
| ||||||
| Ecryptfs Search vendor "Ecryptfs" | Ecryptfs-utils Search vendor "Ecryptfs" for product "Ecryptfs-utils" | 82 Search vendor "Ecryptfs" for product "Ecryptfs-utils" and version "82" | - |
Affected
| ||||||
| Ecryptfs Search vendor "Ecryptfs" | Ecryptfs-utils Search vendor "Ecryptfs" for product "Ecryptfs-utils" | 83 Search vendor "Ecryptfs" for product "Ecryptfs-utils" and version "83" | - |
Affected
| ||||||
| Ecryptfs Search vendor "Ecryptfs" | Ecryptfs-utils Search vendor "Ecryptfs" for product "Ecryptfs-utils" | 84 Search vendor "Ecryptfs" for product "Ecryptfs-utils" and version "84" | - |
Affected
| ||||||
| Ecryptfs Search vendor "Ecryptfs" | Ecryptfs-utils Search vendor "Ecryptfs" for product "Ecryptfs-utils" | 85 Search vendor "Ecryptfs" for product "Ecryptfs-utils" and version "85" | - |
Affected
| ||||||
| Ecryptfs Search vendor "Ecryptfs" | Ecryptfs-utils Search vendor "Ecryptfs" for product "Ecryptfs-utils" | 86 Search vendor "Ecryptfs" for product "Ecryptfs-utils" and version "86" | - |
Affected
| ||||||
| Ecryptfs Search vendor "Ecryptfs" | Ecryptfs-utils Search vendor "Ecryptfs" for product "Ecryptfs-utils" | 87 Search vendor "Ecryptfs" for product "Ecryptfs-utils" and version "87" | - |
Affected
| ||||||
| Ecryptfs Search vendor "Ecryptfs" | Ecryptfs Utils Search vendor "Ecryptfs" for product "Ecryptfs Utils" | 58 Search vendor "Ecryptfs" for product "Ecryptfs Utils" and version "58" | - |
Affected
| ||||||
| Ecryptfs Search vendor "Ecryptfs" | Ecryptfs Utils Search vendor "Ecryptfs" for product "Ecryptfs Utils" | 59 Search vendor "Ecryptfs" for product "Ecryptfs Utils" and version "59" | - |
Affected
| ||||||
| Ecryptfs Search vendor "Ecryptfs" | Ecryptfs Utils Search vendor "Ecryptfs" for product "Ecryptfs Utils" | 60 Search vendor "Ecryptfs" for product "Ecryptfs Utils" and version "60" | - |
Affected
| ||||||
| Ecryptfs Search vendor "Ecryptfs" | Ecryptfs Utils Search vendor "Ecryptfs" for product "Ecryptfs Utils" | 61 Search vendor "Ecryptfs" for product "Ecryptfs Utils" and version "61" | - |
Affected
| ||||||