CVE-2011-1836 in ecryptfs-utils

Summary

utils/ecryptfs-recover-private in ecryptfs-utils before 90 does not establish a subdirectory with safe permissions, which might allow local users to bypass intended access restrictions via standard filesystem operations during the recovery process.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservation: 04/27/2011
• Disclosure: 02/15/2014
• Moderation: VulDB entry created
• Entries: VDB-66402 (1)
• CPE: ready
• CWE: CWE-264 (Confirmed)
• CVSS: 5.9
• EPSS: 0.00047
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-1836
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-1836
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-1836/