TrueCrypt Dismount Set-EUID Local Denial of Service Vulnerability

Bugtraq ID:	23128
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2007-1589
Remote:	No
Local:	Yes
Published:	Mar 26 2007 12:00AM
Updated:	Mar 26 2007 06:53PM
Credit:	The vendor reported this issue.
Vulnerable:	TrueCrypt TrueCrypt 4.2 TrueCrypt TrueCrypt 4.1 TrueCrypt TrueCrypt 4.0 TrueCrypt TrueCrypt 3.0
Not Vulnerable:	TrueCrypt TrueCrypt 4.3

TrueCrypt Dismount Set-EUID Local Denial of Service Vulnerability

Truecrypt is prone to a local denial-of-service vulnerability.

Exploiting this issue allows local attackers to dismount volumes mounted by other users, effectively denying service to legitimate users.

Truecrypt versions prior to 4.3 are vulnerable to this issue.

TrueCrypt Dismount Set-EUID Local Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you fell we are in error or if you aware of more recent information, please mail us at: mailto:[email protected].

TrueCrypt Dismount Set-EUID Local Denial of Service Vulnerability

Solution:
The vendor released an update to address this issue. Please see the references for more information.

TrueCrypt Dismount Set-EUID Local Denial of Service Vulnerability

References:

• TrueCrypt Homepage (TrueCrypt)
  
• TrueCrypt Version 4.3 Release Notes (TrueCrypt)