Vulnetix
Try Vulnetix Request Demo
CVE-2011-3145 PUBLISHED CVSS 3.8 LOW

Reported by mitre · Published April 22, 2019

When mount.ecrpytfs_private before version 87-0ubuntu1.2 calls setreuid() it doesn't also set the effective group id. So when it creates the new version, mtab.tmp, it's created with the group id of the user running mount.ecryptfs_private.

Risk Scores

CVSS v3.0
3.8
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L

Affected Products

VendorProductVersions
n/an/an/a
n/an/an/a

Timeline

References

Open in Interactive Console →