Unscored severity · published Nov 21, 2008
CVE-2008-5188
The (1) ecryptfs-setup-private, (2) ecryptfs-setup-confidential, and (3) ecryptfs-setup-pam-wrapped.sh scripts in ecryptfs-utils 45 through 61 in eCryptfs place cleartext…
–
CVSS
0.4%
EPSS
No
On KEV
Description
The (1) ecryptfs-setup-private, (2) ecryptfs-setup-confidential, and (3) ecryptfs-setup-pam-wrapped.sh scripts in ecryptfs-utils 45 through 61 in eCryptfs place cleartext passwords on command lines, which allows local users to obtain sensitive information by listing the process.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 33% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EU
Ecryptfs Utils · Ecryptfs
45; 46; 47; 48; 49; 50; +10 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-5188
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-5188
git.kernel.org
http://git.kernel.org/?p=linux/kernel/git/mhalcrow/ecryptfs-utils.git%3Ba=commit%3Bh=06de99afd53f03fe07eda0ad9d61ac6d5d4d9f53
osvdb.org
http://osvdb.org/49334
osvdb.org
http://osvdb.org/50353
osvdb.org
http://osvdb.org/50354
osvdb.org
http://osvdb.org/50355
rhn.redhat.com
http://rhn.redhat.com/errata/RHSA-2009-1307.html
More from Ecryptfs Utils
8.4
CVE-2016-1572
mount.ecryptfs_private.c in eCryptfs-utils does not validate mount destination filesystem types, which allows local users to gain privileges by mounting over a nonstandard…
7.8
CVE-2012-3409
ecryptfs-utils: suid helper does not restrict mounting filesystems with nosuid,nodev which creates a possible privilege escalation
3.3
CVE-2016-6224
ecryptfs-setup-swap in eCryptfs does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning on a (1) NVMe or (2) MMC drive, which…
3.3
CVE-2015-8946
ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning and certain versions of systemd,…
–
CVE-2014-9687
eCryptfs 104 and earlier uses a default salt to encrypt the mount passphrase, which makes it easier for attackers to obtain user passwords via a brute force attack