The (1) ecryptfs-setup-private, (2) ecryptfs-setup-confidential, and (3) ecryptfs-setup-pam-wrapped.sh scripts in ecryptfs-utils 45 through 61 in eCryptfs place cleartext passwords on command lines, which allows local users to obtain sensitive information by listing the process.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade ecryptfs-utils-develUpgrade ecryptfs-utils-guiUpgrade ecryptfs-utils | Dec 1, 2016 | Nov 20, 2008 |
| Debian | — | Upgrade ecryptfs-utils | Jul 30, 2024 | Nov 21, 2008 |
| Oracle_linux | — | Upgrade ecryptfs-utilsUpgrade ecryptfs-utils-guiUpgrade ecryptfs-utils-devel | Oct 16, 2024 | Nov 21, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub