Test ID:	1.3.6.1.4.1.25623.1.0.70905
Category:	Ubuntu Local Security Checks
Title:	Ubuntu USN-1188-1 (ecryptfs-utils)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to ecryptfs-utils announced via advisory USN-1188-1. Details: Vasiliy Kulikov and Dan Rosenberg discovered that eCryptfs incorrectly validated permissions on the requested mountpoint. A local attacker could use this flaw to mount to arbitrary locations, leading to privilege escalation. (CVE-2011-1831) Vasiliy Kulikov and Dan Rosenberg discovered that eCryptfs incorrectly validated permissions on the requested mountpoint. A local attacker could use this flaw to unmount to arbitrary locations, leading to a denial of service. (CVE-2011-1832) Vasiliy Kulikov and Dan Rosenberg discovered that eCryptfs incorrectly validated permissions on the requested source directory. A local attacker could use this flaw to mount an arbitrary directory, possibly leading to information disclosure. A pending kernel update will provide the other half of the fix for this issue. (CVE-2011-1833) Dan Rosenberg and Marc Deslauriers discovered that eCryptfs incorrectly handled modifications to the mtab file when an error occurs. A local attacker could use this flaw to corrupt the mtab file, and possibly unmount arbitrary locations, leading to a denial of service. (CVE-2011-1834) Marc Deslauriers discovered that eCryptfs incorrectly handled keys when setting up an encrypted private directory. A local attacker could use this flaw to manipulate keys during creation of a new user. (CVE-2011-1835) Marc Deslauriers discovered that eCryptfs incorrectly handled permissions during recovery. A local attacker could use this flaw to possibly access another user's data during the recovery process. This issue only applied to Ubuntu 11.04. (CVE-2011-1836) Vasiliy Kulikov discovered that eCryptfs incorrectly handled lock counters. A local attacker could use this flaw to possibly overwrite arbitrary files. The default symlink restrictions in Ubuntu 10.10 and 11.04 should protect against this issue. (CVE-2011-1837) Solution: The problem can be corrected by updating your system to the following package versions: Ubuntu 11.04: ecryptfs-utils 87-0ubuntu1.1 Ubuntu 10.10: ecryptfs-utils 83-0ubuntu3.2.10.10.1 Ubuntu 10.04 LTS: ecryptfs-utils 83-0ubuntu3.2.10.04.1 http://www.securityspace.com/smysecure/catid.html?in=USN-1188-1
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-1831 SuSE Security Announcement: SUSE-SU-2011:0898 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00009.html http://www.ubuntu.com/usn/USN-1188-1 Common Vulnerability Exposure (CVE) ID: CVE-2011-1832 Common Vulnerability Exposure (CVE) ID: CVE-2011-1833 Common Vulnerability Exposure (CVE) ID: CVE-2011-1834 Common Vulnerability Exposure (CVE) ID: CVE-2011-1835 Common Vulnerability Exposure (CVE) ID: CVE-2011-1836 Common Vulnerability Exposure (CVE) ID: CVE-2011-1837
Copyright	Copyright (c) 2012 E-Soft Inc. http://www.securityspace.com

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.