CVE-2011-1835

Publication date 9 August 2011

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

The encrypted private-directory setup process in utils/ecryptfs-setup-private in ecryptfs-utils before 90 does not properly ensure that the passphrase file is created, which might allow local users to bypass intended access restrictions at a certain time in the new-user creation steps.

Status

Package Ubuntu Release Status
ecryptfs-utils 11.04 natty
Fixed 87-0ubuntu1.1
10.10 maverick
Fixed 83-0ubuntu3.2.10.10.1
10.04 LTS lucid
Fixed 83-0ubuntu3.2.10.04.1
8.04 LTS hardy
Not affected

References

Related Ubuntu Security Notices (USN)

    • USN-1188-1
    • eCryptfs vulnerabilities
    • 9 August 2011

Other references