ByteOS Network

Vulnerability Details :

CVE-2008-5188

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-21 Nov, 2008 | 02:00

Updated At-07 Aug, 2024 | 10:40

The (1) ecryptfs-setup-private, (2) ecryptfs-setup-confidential, and (3) ecryptfs-setup-pam-wrapped.sh scripts in ecryptfs-utils 45 through 61 in eCryptfs place cleartext passwords on command lines, which allows local users to obtain sensitive information by listing the process.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:mitre

Assigner Org ID:8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At:21 Nov, 2008 | 02:00

Updated At:07 Aug, 2024 | 10:40

▼CVE Numbering Authority (CNA)

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://www.openwall.com/lists/oss-security/2008/10/23/3	mailing-list x_refsource_MLIST
http://www.openwall.com/lists/oss-security/2008/10/29/7	mailing-list x_refsource_MLIST
https://launchpad.net/bugs/287908	x_refsource_CONFIRM
http://git.kernel.org/?p=linux/kernel/git/mhalcrow/ecryptfs-utils.git%3Ba=commit%3Bh=06de99afd53f03fe07eda0ad9d61ac6d5d4d9f53	x_refsource_CONFIRM
http://osvdb.org/50355	vdb-entry x_refsource_OSVDB
http://www.openwall.com/lists/oss-security/2008/10/29/4	mailing-list x_refsource_MLIST
http://secunia.com/advisories/32382	third-party-advisory x_refsource_SECUNIA
http://osvdb.org/50354	vdb-entry x_refsource_OSVDB
https://exchange.xforce.ibmcloud.com/vulnerabilities/46073	vdb-entry x_refsource_XF
http://osvdb.org/49334	vdb-entry x_refsource_OSVDB
http://rhn.redhat.com/errata/RHSA-2009-1307.html	vendor-advisory x_refsource_REDHAT
http://secunia.com/advisories/36552	third-party-advisory x_refsource_SECUNIA
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9607	vdb-entry signature x_refsource_OVAL
http://osvdb.org/50353	vdb-entry x_refsource_OSVDB

Hyperlink: http://www.openwall.com/lists/oss-security/2008/10/23/3

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://www.openwall.com/lists/oss-security/2008/10/29/7

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://launchpad.net/bugs/287908

Resource:

x_refsource_CONFIRM

Hyperlink: http://git.kernel.org/?p=linux/kernel/git/mhalcrow/ecryptfs-utils.git%3Ba=commit%3Bh=06de99afd53f03fe07eda0ad9d61ac6d5d4d9f53

Resource:

x_refsource_CONFIRM

Hyperlink: http://osvdb.org/50355

Resource:

vdb-entry

x_refsource_OSVDB

Hyperlink: http://www.openwall.com/lists/oss-security/2008/10/29/4

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://secunia.com/advisories/32382

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://osvdb.org/50354

Resource:

vdb-entry

x_refsource_OSVDB

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/46073

Resource:

vdb-entry

x_refsource_XF

Hyperlink: http://osvdb.org/49334

Resource:

vdb-entry

x_refsource_OSVDB

Hyperlink: http://rhn.redhat.com/errata/RHSA-2009-1307.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://secunia.com/advisories/36552

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9607

Resource:

vdb-entry

signature

x_refsource_OVAL

Hyperlink: http://osvdb.org/50353

Resource:

vdb-entry

x_refsource_OSVDB

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.openwall.com/lists/oss-security/2008/10/23/3	mailing-list x_refsource_MLIST x_transferred
http://www.openwall.com/lists/oss-security/2008/10/29/7	mailing-list x_refsource_MLIST x_transferred
https://launchpad.net/bugs/287908	x_refsource_CONFIRM x_transferred
http://git.kernel.org/?p=linux/kernel/git/mhalcrow/ecryptfs-utils.git%3Ba=commit%3Bh=06de99afd53f03fe07eda0ad9d61ac6d5d4d9f53	x_refsource_CONFIRM x_transferred
http://osvdb.org/50355	vdb-entry x_refsource_OSVDB x_transferred
http://www.openwall.com/lists/oss-security/2008/10/29/4	mailing-list x_refsource_MLIST x_transferred
http://secunia.com/advisories/32382	third-party-advisory x_refsource_SECUNIA x_transferred
http://osvdb.org/50354	vdb-entry x_refsource_OSVDB x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/46073	vdb-entry x_refsource_XF x_transferred
http://osvdb.org/49334	vdb-entry x_refsource_OSVDB x_transferred
http://rhn.redhat.com/errata/RHSA-2009-1307.html	vendor-advisory x_refsource_REDHAT x_transferred
http://secunia.com/advisories/36552	third-party-advisory x_refsource_SECUNIA x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9607	vdb-entry signature x_refsource_OVAL x_transferred
http://osvdb.org/50353	vdb-entry x_refsource_OSVDB x_transferred

Hyperlink: http://www.openwall.com/lists/oss-security/2008/10/23/3

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: http://www.openwall.com/lists/oss-security/2008/10/29/7

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: https://launchpad.net/bugs/287908

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://git.kernel.org/?p=linux/kernel/git/mhalcrow/ecryptfs-utils.git%3Ba=commit%3Bh=06de99afd53f03fe07eda0ad9d61ac6d5d4d9f53

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://osvdb.org/50355

Resource:

vdb-entry

x_refsource_OSVDB

x_transferred

Hyperlink: http://www.openwall.com/lists/oss-security/2008/10/29/4

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: http://secunia.com/advisories/32382

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://osvdb.org/50354

Resource:

vdb-entry

x_refsource_OSVDB

x_transferred

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/46073

Resource:

vdb-entry

x_refsource_XF

x_transferred

Hyperlink: http://osvdb.org/49334

Resource:

vdb-entry

x_refsource_OSVDB

x_transferred

Hyperlink: http://rhn.redhat.com/errata/RHSA-2009-1307.html

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://secunia.com/advisories/36552

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9607

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Hyperlink: http://osvdb.org/50353

Resource:

vdb-entry

x_refsource_OSVDB

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:21 Nov, 2008 | 02:30

Updated At:23 Apr, 2026 | 00:35

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 7.2

Base severity: HIGH

Vector:

AV:L/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

ecryptfs>>ecryptfs_utils>>45

cpe:2.3:a:ecryptfs:ecryptfs_utils:45:*:*:*:*:*:*:*

ecryptfs>>ecryptfs_utils>>46

cpe:2.3:a:ecryptfs:ecryptfs_utils:46:*:*:*:*:*:*:*

ecryptfs>>ecryptfs_utils>>47

cpe:2.3:a:ecryptfs:ecryptfs_utils:47:*:*:*:*:*:*:*

ecryptfs>>ecryptfs_utils>>48

cpe:2.3:a:ecryptfs:ecryptfs_utils:48:*:*:*:*:*:*:*

ecryptfs>>ecryptfs_utils>>49

cpe:2.3:a:ecryptfs:ecryptfs_utils:49:*:*:*:*:*:*:*

ecryptfs>>ecryptfs_utils>>50

cpe:2.3:a:ecryptfs:ecryptfs_utils:50:*:*:*:*:*:*:*

ecryptfs>>ecryptfs_utils>>51

cpe:2.3:a:ecryptfs:ecryptfs_utils:51:*:*:*:*:*:*:*

ecryptfs>>ecryptfs_utils>>53

cpe:2.3:a:ecryptfs:ecryptfs_utils:53:*:*:*:*:*:*:*

ecryptfs>>ecryptfs_utils>>54

cpe:2.3:a:ecryptfs:ecryptfs_utils:54:*:*:*:*:*:*:*

ecryptfs>>ecryptfs_utils>>55

cpe:2.3:a:ecryptfs:ecryptfs_utils:55:*:*:*:*:*:*:*

ecryptfs>>ecryptfs_utils>>56

cpe:2.3:a:ecryptfs:ecryptfs_utils:56:*:*:*:*:*:*:*

ecryptfs>>ecryptfs_utils>>57

cpe:2.3:a:ecryptfs:ecryptfs_utils:57:*:*:*:*:*:*:*

ecryptfs>>ecryptfs_utils>>58

cpe:2.3:a:ecryptfs:ecryptfs_utils:58:*:*:*:*:*:*:*

ecryptfs>>ecryptfs_utils>>59

cpe:2.3:a:ecryptfs:ecryptfs_utils:59:*:*:*:*:*:*:*

ecryptfs>>ecryptfs_utils>>60

cpe:2.3:a:ecryptfs:ecryptfs_utils:60:*:*:*:*:*:*:*

ecryptfs>>ecryptfs_utils>>61

cpe:2.3:a:ecryptfs:ecryptfs_utils:61:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-255	Primary	nvd@nist.gov

CWE ID: CWE-255

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://git.kernel.org/?p=linux/kernel/git/mhalcrow/ecryptfs-utils.git%3Ba=commit%3Bh=06de99afd53f03fe07eda0ad9d61ac6d5d4d9f53	cve@mitre.org	N/A
http://osvdb.org/49334	cve@mitre.org	N/A
http://osvdb.org/50353	cve@mitre.org	N/A
http://osvdb.org/50354	cve@mitre.org	N/A
http://osvdb.org/50355	cve@mitre.org	N/A
http://rhn.redhat.com/errata/RHSA-2009-1307.html	cve@mitre.org	N/A
http://secunia.com/advisories/32382	cve@mitre.org	N/A
http://secunia.com/advisories/36552	cve@mitre.org	N/A
http://www.openwall.com/lists/oss-security/2008/10/23/3	cve@mitre.org	N/A
http://www.openwall.com/lists/oss-security/2008/10/29/4	cve@mitre.org	N/A
http://www.openwall.com/lists/oss-security/2008/10/29/7	cve@mitre.org	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/46073	cve@mitre.org	N/A
https://launchpad.net/bugs/287908	cve@mitre.org	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9607	cve@mitre.org	N/A
http://git.kernel.org/?p=linux/kernel/git/mhalcrow/ecryptfs-utils.git%3Ba=commit%3Bh=06de99afd53f03fe07eda0ad9d61ac6d5d4d9f53	af854a3a-2127-422b-91ae-364da2661108	N/A
http://osvdb.org/49334	af854a3a-2127-422b-91ae-364da2661108	N/A
http://osvdb.org/50353	af854a3a-2127-422b-91ae-364da2661108	N/A
http://osvdb.org/50354	af854a3a-2127-422b-91ae-364da2661108	N/A
http://osvdb.org/50355	af854a3a-2127-422b-91ae-364da2661108	N/A
http://rhn.redhat.com/errata/RHSA-2009-1307.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/32382	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/36552	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.openwall.com/lists/oss-security/2008/10/23/3	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.openwall.com/lists/oss-security/2008/10/29/4	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.openwall.com/lists/oss-security/2008/10/29/7	af854a3a-2127-422b-91ae-364da2661108	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/46073	af854a3a-2127-422b-91ae-364da2661108	N/A
https://launchpad.net/bugs/287908	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9607	af854a3a-2127-422b-91ae-364da2661108	N/A