ByteOS Network

NVD Vulnerability Details :

CVE-2008-5188

Modified

Source-cve@mitre.org

Published At-21 Nov, 2008 | 02:30

Updated At-07 Nov, 2023 | 02:03

The (1) ecryptfs-setup-private, (2) ecryptfs-setup-confidential, and (3) ecryptfs-setup-pam-wrapped.sh scripts in ecryptfs-utils 45 through 61 in eCryptfs place cleartext passwords on command lines, which allows local users to obtain sensitive information by listing the process.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

ecryptfs>>ecryptfs_utils>>45

cpe:2.3:a:ecryptfs:ecryptfs_utils:45:*:*:*:*:*:*:*

ecryptfs>>ecryptfs_utils>>46

cpe:2.3:a:ecryptfs:ecryptfs_utils:46:*:*:*:*:*:*:*

ecryptfs>>ecryptfs_utils>>47

cpe:2.3:a:ecryptfs:ecryptfs_utils:47:*:*:*:*:*:*:*

ecryptfs>>ecryptfs_utils>>48

cpe:2.3:a:ecryptfs:ecryptfs_utils:48:*:*:*:*:*:*:*

ecryptfs>>ecryptfs_utils>>49

cpe:2.3:a:ecryptfs:ecryptfs_utils:49:*:*:*:*:*:*:*

ecryptfs>>ecryptfs_utils>>50

cpe:2.3:a:ecryptfs:ecryptfs_utils:50:*:*:*:*:*:*:*

ecryptfs>>ecryptfs_utils>>51

cpe:2.3:a:ecryptfs:ecryptfs_utils:51:*:*:*:*:*:*:*

ecryptfs>>ecryptfs_utils>>53

cpe:2.3:a:ecryptfs:ecryptfs_utils:53:*:*:*:*:*:*:*

ecryptfs>>ecryptfs_utils>>54

cpe:2.3:a:ecryptfs:ecryptfs_utils:54:*:*:*:*:*:*:*

ecryptfs>>ecryptfs_utils>>55

cpe:2.3:a:ecryptfs:ecryptfs_utils:55:*:*:*:*:*:*:*

ecryptfs>>ecryptfs_utils>>56

cpe:2.3:a:ecryptfs:ecryptfs_utils:56:*:*:*:*:*:*:*

ecryptfs>>ecryptfs_utils>>57

cpe:2.3:a:ecryptfs:ecryptfs_utils:57:*:*:*:*:*:*:*

ecryptfs>>ecryptfs_utils>>58

cpe:2.3:a:ecryptfs:ecryptfs_utils:58:*:*:*:*:*:*:*

ecryptfs>>ecryptfs_utils>>59

cpe:2.3:a:ecryptfs:ecryptfs_utils:59:*:*:*:*:*:*:*

ecryptfs>>ecryptfs_utils>>60

cpe:2.3:a:ecryptfs:ecryptfs_utils:60:*:*:*:*:*:*:*

ecryptfs>>ecryptfs_utils>>61

cpe:2.3:a:ecryptfs:ecryptfs_utils:61:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-255	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://git.kernel.org/?p=linux/kernel/git/mhalcrow/ecryptfs-utils.git%3Ba=commit%3Bh=06de99afd53f03fe07eda0ad9d61ac6d5d4d9f53	cve@mitre.org	N/A
http://osvdb.org/49334	cve@mitre.org	N/A
http://osvdb.org/50353	cve@mitre.org	N/A
http://osvdb.org/50354	cve@mitre.org	N/A
http://osvdb.org/50355	cve@mitre.org	N/A
http://rhn.redhat.com/errata/RHSA-2009-1307.html	cve@mitre.org	N/A
http://secunia.com/advisories/32382	cve@mitre.org	N/A
http://secunia.com/advisories/36552	cve@mitre.org	N/A
http://www.openwall.com/lists/oss-security/2008/10/23/3	cve@mitre.org	N/A
http://www.openwall.com/lists/oss-security/2008/10/29/4	cve@mitre.org	N/A
http://www.openwall.com/lists/oss-security/2008/10/29/7	cve@mitre.org	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/46073	cve@mitre.org	N/A
https://launchpad.net/bugs/287908	cve@mitre.org	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9607	cve@mitre.org	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History