Privilege Escalation Vulnerability in ecryptfs-utils: Group ID Mismanagement
Summary
CVE-2011-3145: When mount.ecrpytfs_private before version 87-0ubuntu1.2 calls setreuid() it doesn't also set the effective group id. Affects ecryptfs-utils versions < 92-1. Fixed in 92-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
ecryptfs-utils is a package used in Debian-based systems for managing encrypted filesystems. It provides tools for mounting and managing encrypted directories, ensuring data confidentiality. However, prior to version 92-1, it contained a vulnerability that allowed improper handling of group IDs during the execution of the mount.ecryptfs_private command, potentially leading to privilege escalation.
Vulnerability Detail
The vulnerability, identified as CVE-2011-3145, arises from the failure of the mount.ecryptfs_private command to set the effective group ID when calling setreuid(). This oversight means that the temporary file mtab.tmp is created with the group ID of the user executing the command, rather than the intended group ID. This could allow unauthorized users to gain access to sensitive information or perform actions with elevated privileges, compromising system security.
How To Fix
Minimum fixed version
92-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade ecryptfs-utilsTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can avoid using the mount.ecryptfs_private command until the package is updated. Additionally, ensuring that only trusted users have access to the system can help mitigate potential risks until a fix is applied.
Conclusion
CVE-2011-3145 represents a significant security risk in the ecryptfs-utils package due to improper group ID handling. Users are strongly advised to upgrade to version 92-1 or later to mitigate this vulnerability. Until then, applying workarounds and monitoring access can help protect sensitive data.
See every vulnerability recorded for ecryptfs-utils →
FAQ
CVE-2011-3145 is a vulnerability in the ecryptfs-utils package that allows improper handling of group IDs, potentially leading to privilege escalation.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
The consequences include unauthorized access to sensitive data and the potential for malicious users to execute commands with elevated privileges.
Yes, avoid using the mount.ecryptfs_private command and restrict access to trusted users until the package is updated.
The CVSS score of this vulnerability is 9.8, indicating a critical level of severity.
Related vulnerabilities
Recent vulnerabilities recorded for ecryptfs-utils.
