Back to Database
Status published
Medium
CVE-2011-1835
The encrypted private-directory setup process in utils/ecryptfs-setup-private in ecryptfs-utils before...
Vulnerability Description
The encrypted private-directory setup process in utils/ecryptfs-setup-private in ecryptfs-utils before 90 does not properly ensure that the passphrase file is created, which might allow local users to bypass intended access restrictions at a certain time in the new-user creation steps.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2011-1835
Credits & Attribution
No credits recorded in the NVD database.
References
More from ecryptfs
View All →CVE-2016-6224
ecryptfs-setup-swap in eCryptfs does not prevent the unencrypted swap partition...
Low
3.3
CVE-2016-1572
mount.ecryptfs_private.c in eCryptfs-utils does not validate mount destination filesystem types,...
High
8.4
CVE-2014-9687
eCryptfs 104 and earlier uses a default salt to encrypt...
Medium
5
CVE-2011-1837
The lock-counter implementation in utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 allows...
Low
3.6
CVE-2011-1836
utils/ecryptfs-recover-private in ecryptfs-utils before 90 does not establish a subdirectory...
Medium
4.6
Affected Vendor
ecryptfs
View all reports →Affected Software
ecryptfs-utils, ecryptfs utils
Vulnerable Versions:
0, 62, 63, 64, 65, 66, 67, 68, 69, 70, 71, 72, 73, 74, 75, 76, 77, 78, 79, 80, 81, 82, 83, 84, 85, 86, 87, 58, 59, 60, 61
Timeline
Official Publish:
February 15th, 2014
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.