CVE Feed

    Dashboard / CVE / CVE-2011-1836

    CVE-2011-1836

    utils/ecryptfs-recover-private in ecryptfs-utils before 90 does not establish a subdirectory with safe permissions, which might allow local users to bypass intended access restrictions via standard filesystem operations during the recovery process.

    Published:Aug 9, 2011
    Last Modified:Apr 11, 2025
    EPS:Feb 15, 2014
    EPSS Score:0.00047
    CVSS Score:4.6

    Affected Products

    Vendor
    Ecryptfs
    Product
    Ecryptfs-utils
    Vendor
    Ecryptfs
    Product
    Ecryptfs Utils

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2016-6224 (CVSS 3.3) — ecryptfs-setup-swap in eCryptfs does not prevent the unencrypted swap partition from activating during boot wh…
    CVE-2016-1572 (CVSS 8.4) — mount.ecryptfs_private.c in eCryptfs-utils does not validate mount destination filesystem types, which allows …
    CVE-2015-8946 (CVSS 3.3) — ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from activating dur…
    CVE-2012-3409 (CVSS 7.8) — ecryptfs-utils: suid helper does not restrict mounting filesystems with nosuid,nodev which creates a possible …
    CVE-2014-9687 (CVSS 5) — eCryptfs 104 and earlier uses a default salt to encrypt the mount passphrase, which makes it easier for attack…
    CVE-2011-1834 (CVSS 2.1) — utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly maintain the mtab file during err…
    CVE-2011-1831 (CVSS 4.6) — utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, whi…
    CVE-2011-1835 (CVSS 4.4) — The encrypted private-directory setup process in utils/ecryptfs-setup-private in ecryptfs-utils before 90 does…
    CVE-2011-1837 (CVSS 3.6) — The lock-counter implementation in utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 allows local use…
    CVE-2011-1832 (CVSS 2.1) — utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, whi…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High