PT-2009-3830 · Canonical · Ecryptfs-Utils

Published 2009-06-09 · Updated 2017-08-17 · CVE-2009-1296

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Low

Base vector

AV:L/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions ecryptfs-utils version 73-0ubuntu6.1

Description The issue allows local users to potentially obtain access to the filesystem by reading log files from disk, as the mount passphrase is stored in installation logs. However, it's noted that the log files are only readable by root.

Recommendations For ecryptfs-utils version 73-0ubuntu6.1, consider restricting access to the installation logs to prevent unauthorized users from reading the mount passphrase, even though the logs are currently only readable by root.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2009-1296

Affected Products

Ecryptfs-Utils

References · 8

• https://osv.dev/vulnerability/CVE-2009-1296 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-1296 · Security Note
• http://secunia.com/advisories/35383 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2009-1296 · Vendor Advisory
• http://ubuntu.com/usn/usn-783-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2009-1296 · Vendor Advisory
• http://securitytracker.com/id?1022347 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51191 · Note