CVE Feed

    Dashboard / CVE / CVE-2014-9687

    CVE-2014-9687

    eCryptfs 104 and earlier uses a default salt to encrypt the mount passphrase, which makes it easier for attackers to obtain user passwords via a brute force attack.

    Published:Dec 19, 2011
    Last Modified:Apr 12, 2025
    EPS:Mar 16, 2015
    EPSS Score:0.00521
    CVSS Score:5

    Affected Products

    Vendor
    Ecryptfs
    Product
    Ecryptfs-utils

    Exploits

    https://bugs.launchpad.net/ecryptfs/+bug/906550https://bugs.launchpad.net/ecryptfs/+bug/906550

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2016-6224 (CVSS 3.3) — ecryptfs-setup-swap in eCryptfs does not prevent the unencrypted swap partition from activating during boot wh…
    CVE-2016-1572 (CVSS 8.4) — mount.ecryptfs_private.c in eCryptfs-utils does not validate mount destination filesystem types, which allows …
    CVE-2015-8946 (CVSS 3.3) — ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from activating dur…
    CVE-2012-3409 (CVSS 7.8) — ecryptfs-utils: suid helper does not restrict mounting filesystems with nosuid,nodev which creates a possible …
    CVE-2011-1834 (CVSS 2.1) — utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly maintain the mtab file during err…
    CVE-2011-1831 (CVSS 4.6) — utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, whi…
    CVE-2011-1835 (CVSS 4.4) — The encrypted private-directory setup process in utils/ecryptfs-setup-private in ecryptfs-utils before 90 does…
    CVE-2011-1836 (CVSS 4.6) — utils/ecryptfs-recover-private in ecryptfs-utils before 90 does not establish a subdirectory with safe permiss…
    CVE-2011-1837 (CVSS 3.6) — The lock-counter implementation in utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 allows local use…
    CVE-2011-1832 (CVSS 2.1) — utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, whi…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High