CVE-2011-1832

utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, which allows local users to remove directories via a umount system call.

Score

CVSS 2.0 2.1 Low

Status

Modified - security@ubuntu.com

Published

2014-02-15

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Ecryptfs-utils (Ecryptfs)
• Ecryptfs Utils (Ecryptfs)

References

• http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00009.html
• http://www.ubuntu.com/usn/USN-1188-1
• https://bugzilla.redhat.com/show_bug.cgi?id=729465
• https://launchpad.net/ecryptfs/+download