eCryptfs 'mtab' Security Bypass Vulnerability
BID:49287
Info
eCryptfs 'mtab' Security Bypass Vulnerability
| Bugtraq ID: | 49287 |
| Class: | Unknown |
| CVE: |
CVE-2011-3145 |
| Remote: | No |
| Local: | Yes |
| Published: | Aug 23 2011 12:00AM |
| Updated: | Apr 13 2015 09:44PM |
| Credit: | <br>Marc Deslauriers |
| Vulnerable: |
Ubuntu Ubuntu Linux 11.04 powerpc Ubuntu Ubuntu Linux 11.04 i386 Ubuntu Ubuntu Linux 11.04 ARM Ubuntu Ubuntu Linux 11.04 amd64 Ubuntu Ubuntu Linux 11.04 Ubuntu Ubuntu Linux 10.10 powerpc Ubuntu Ubuntu Linux 10.10 i386 Ubuntu Ubuntu Linux 10.10 ARM Ubuntu Ubuntu Linux 10.10 amd64 Ubuntu Ubuntu Linux 10.10 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 LTS Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 RedHat Enterprise Linux Desktop Workstation 5 client Red Hat Enterprise Linux Workstation Optional 6 Red Hat Enterprise Linux Workstation 6 Red Hat Enterprise Linux Server Optional 6 Red Hat Enterprise Linux Server 6 Red Hat Enterprise Linux HPC Node Optional 6 Red Hat Enterprise Linux HPC Node 6 Red Hat Enterprise Linux Desktop Optional 6 Red Hat Enterprise Linux Desktop 6 Red Hat Enterprise Linux Desktop 5 client Red Hat Enterprise Linux 5 Server Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 Avaya IQ 5.2 Avaya IQ 5.1.1 Avaya IQ 5.1 Avaya IQ 5 Avaya Aura System Platform 6.0.2 Avaya Aura System Platform 6.0.1 Avaya Aura System Platform 6.0 SP3 Avaya Aura System Platform 6.0 SP2 Avaya Aura System Platform 6.0 Avaya Aura System Platform 1.1 Avaya Aura System Manager 6.2 Avaya Aura System Manager 6.1.3 Avaya Aura System Manager 6.1.2 Avaya Aura System Manager 6.1.1 Avaya Aura System Manager 6.1 SP2 Avaya Aura System Manager 6.1 Sp1 Avaya Aura System Manager 6.1 Avaya Aura System Manager 1.0 Avaya Aura Communication Manager Utility Services 6.1 Avaya Aura Communication Manager Utility Services 6.0 |
| Not Vulnerable: | |
Discussion
eCryptfs 'mtab' Security Bypass Vulnerability
eCryptfs is prone to a security-bypass vulnerability.
An attacker can exploit this issue to bypass certain security restrictions and gain authenticated access to the application to corrupt the 'mtab' file, and possibly unmount arbitrary locations, resulting in a denial-of-service condition.
eCryptfs is prone to a security-bypass vulnerability.
An attacker can exploit this issue to bypass certain security restrictions and gain authenticated access to the application to corrupt the 'mtab' file, and possibly unmount arbitrary locations, resulting in a denial-of-service condition.
Exploit / POC
eCryptfs 'mtab' Security Bypass Vulnerability
An attacker can use readily available tools to exploit this issue.
An attacker can use readily available tools to exploit this issue.
Solution / Fix
eCryptfs 'mtab' Security Bypass Vulnerability
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
eCryptfs 'mtab' Security Bypass Vulnerability
References:
References:
- Linux kernel Homepage (kernel.org)
- ASA-2011-280 ecryptfs-utils security update (RHSA-2011-1241) (Avaya)
- USN-1196-1: eCryptfs vulnerability (Ubuntu )