CVE-2008-5188

Published: Nov 21, 2008Modified: Apr 23, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

The (1) ecryptfs-setup-private, (2) ecryptfs-setup-confidential, and (3) ecryptfs-setup-pam-wrapped.sh scripts in ecryptfs-utils 45 through 61 in eCryptfs place cleartext passwords on command lines, which allows local users to obtain sensitive information by listing the process.

Affected (16)

Products: Ecryptfs: Ecryptfs Utils

1 product

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Ecryptfs Ecryptfs Utils	Version 45
Ecryptfs Ecryptfs Utils	Version 46
Ecryptfs Ecryptfs Utils	Version 47
Ecryptfs Ecryptfs Utils	Version 48
Ecryptfs Ecryptfs Utils	Version 49
Ecryptfs Ecryptfs Utils	Version 50
Ecryptfs Ecryptfs Utils	Version 51
Ecryptfs Ecryptfs Utils	Version 53
Ecryptfs Ecryptfs Utils	Version 54
Ecryptfs Ecryptfs Utils	Version 55
Ecryptfs Ecryptfs Utils	Version 56
Ecryptfs Ecryptfs Utils	Version 57
Ecryptfs Ecryptfs Utils	Version 58
Ecryptfs Ecryptfs Utils	Version 59
Ecryptfs Ecryptfs Utils	Version 60
Ecryptfs Ecryptfs Utils	Version 61

Related CWEs

References (28)

http://git.kernel.org/?p=linux/kernel/git/mhalcrow/ecryptfs-utils.git%3Ba=commit%3Bh=06de99afd53f03fe07eda0ad9d61ac6d5d4d9f53

Source: cve@mitre.org

http://osvdb.org/49334

Source: cve@mitre.org

http://osvdb.org/50353

Source: cve@mitre.org

http://osvdb.org/50354

Source: cve@mitre.org

http://osvdb.org/50355

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2009-1307.html

Source: cve@mitre.org

http://secunia.com/advisories/32382

Source: cve@mitre.org

http://secunia.com/advisories/36552

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2008/10/23/3

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2008/10/29/4

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2008/10/29/7

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/46073

Source: cve@mitre.org

https://launchpad.net/bugs/287908

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9607

Source: cve@mitre.org

http://git.kernel.org/?p=linux/kernel/git/mhalcrow/ecryptfs-utils.git%3Ba=commit%3Bh=06de99afd53f03fe07eda0ad9d61ac6d5d4d9f53

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/49334

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/50353

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/50354

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/50355

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2009-1307.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/32382

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/36552

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2008/10/23/3

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2008/10/29/4

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2008/10/29/7

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/46073

Source: af854a3a-2127-422b-91ae-364da2661108

https://launchpad.net/bugs/287908

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9607

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.