USN-783-1: eCryptfs vulnerability

iBot · #1 (**permalink**) 06-08-2009

Referenced CVEs:
CVE-2009-1296

Description:
===========================================================Ubuntu Security Notice USN-783-1 June 08, 2009ecryptfs-utils vulnerabilityCVE-2009-1296===========================================================A security issue affects the following Ubuntu releases:Ubuntu 9.04This advisory also applies to the corresponding versions ofKubuntu, Edubuntu, and Xubuntu.The problem can be corrected by upgrading your system to thefollowing package versions:Ubuntu 9.04: ecryptfs-utils 73-0ubuntu6.1In general, a standard system upgrade is sufficient to effect thenecessary changes.Details follow:Chris Jones discovered that the eCryptfs support utilities wouldreport the mount passphrase into installation logs when an eCryptfshome directory was selected during Ubuntu installation. The logs areonly readable by the root user, but this still left the mount passphraseunencrypted on disk, potentially leading to a loss of privacy.

More...

More UNIX and Linux Forum Topics You Might Find Helpful
Thread	Thread Starter	Forum	Replies	Last Post
USN-740-1: NSS vulnerability	iBot	Security Advisories (RSS)	0	03-17-2009 06:20 PM
USN-705-1: NTP vulnerability	iBot	Security Advisories (RSS)	0	01-08-2009 02:50 PM
USN-664-1: Tk vulnerability	iBot	Security Advisories (RSS)	0	11-06-2008 03:50 PM
S-067: Tk Vulnerability	iBot	Security Advisories (RSS)	0	02-22-2008 05:20 PM
S-121: VFS Vulnerability	iBot	Security Advisories (RSS)	0	01-17-2008 07:10 PM

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes	Rate This Thread
Switch to Linear Mode Switch to Hybrid Mode Threaded Mode	Rate This Thread:


	Powered by