CVE Feed

    Dashboard / CVE / CVE-2011-1835

    CVE-2011-1835

    The encrypted private-directory setup process in utils/ecryptfs-setup-private in ecryptfs-utils before 90 does not properly ensure that the passphrase file is created, which might allow local users to bypass intended access restrictions at a certain time in the new-user creation steps.

    Published:Aug 9, 2011
    Last Modified:Apr 11, 2025
    EPS:Feb 15, 2014
    EPSS Score:0.00059
    CVSS Score:4.4

    Affected Products

    Vendor
    Ecryptfs
    Product
    Ecryptfs-utils
    Vendor
    Ecryptfs
    Product
    Ecryptfs Utils
    Vendor
    Redhat
    Product
    Enterprise Linux

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2016-6224 (CVSS 3.3) — ecryptfs-setup-swap in eCryptfs does not prevent the unencrypted swap partition from activating during boot wh…
    CVE-2016-1572 (CVSS 8.4) — mount.ecryptfs_private.c in eCryptfs-utils does not validate mount destination filesystem types, which allows …
    CVE-2015-8946 (CVSS 3.3) — ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from activating dur…
    CVE-2012-3409 (CVSS 7.8) — ecryptfs-utils: suid helper does not restrict mounting filesystems with nosuid,nodev which creates a possible …
    CVE-2014-9687 (CVSS 5) — eCryptfs 104 and earlier uses a default salt to encrypt the mount passphrase, which makes it easier for attack…
    CVE-2011-1834 (CVSS 2.1) — utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly maintain the mtab file during err…
    CVE-2011-1831 (CVSS 4.6) — utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, whi…
    CVE-2011-1836 (CVSS 4.6) — utils/ecryptfs-recover-private in ecryptfs-utils before 90 does not establish a subdirectory with safe permiss…
    CVE-2011-1837 (CVSS 3.6) — The lock-counter implementation in utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 allows local use…
    CVE-2011-1832 (CVSS 2.1) — utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, whi…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High