Security Advisory

CVE-2011-3145

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-04-22 15:35:58

Last updated 2024-09-16 22:51:14

Assigner mitre

CVSS score 3.8

State PUBLISHED

Description

When mount.ecrpytfs_private before version 87-0ubuntu1.2 calls setreuid() it doesn't also set the effective group id. So when it creates the new version, mtab.tmp, it's created with the group id of the user running mount.ecryptfs_private.

← Browse all CVEs View on cve.org ↗