CVE

Id
35305  
CVE No.
CVE-2008-5188  
Status
Candidate  
Description
The (1) ecryptfs-setup-private, (2) ecryptfs-setup-confidential, and (3) ecryptfs-setup-pam-wrapped.sh scripts in ecryptfs-utils 45 through 61 in eCryptfs place cleartext passwords on command lines, which allows local users to obtain sensitive information by listing the process.  
Phase
Assigned (20081120)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
387005 35305 CVE-2008-5188 MLIST:[oss-security] 20081023 CVE request for ecryptfs  View
387006 35305 CVE-2008-5188 URL:http://www.openwall.com/lists/oss-security/2008/10/23/3  View
387007 35305 CVE-2008-5188 MLIST:[oss-security] 20081029 Re: CVE request for ecryptfs  View
387008 35305 CVE-2008-5188 URL:http://www.openwall.com/lists/oss-security/2008/10/29/4  View
387009 35305 CVE-2008-5188 MLIST:[oss-security] 20081029 Re: CVE request for ecryptfs  View
387010 35305 CVE-2008-5188 URL:http://www.openwall.com/lists/oss-security/2008/10/29/7  View
387011 35305 CVE-2008-5188 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/mhalcrow/ecryptfs-utils.git;a=commit;h=06de99afd53f03fe07eda0ad9d61ac6d5d4d9f53  View
387012 35305 CVE-2008-5188 CONFIRM:https://launchpad.net/bugs/287908  View
387013 35305 CVE-2008-5188 REDHAT:RHSA-2009:1307  View
387014 35305 CVE-2008-5188 URL:http://rhn.redhat.com/errata/RHSA-2009-1307.html  View
387015 35305 CVE-2008-5188 OSVDB:49334  View
387016 35305 CVE-2008-5188 URL:http://osvdb.org/49334  View
387017 35305 CVE-2008-5188 OSVDB:50353  View
387018 35305 CVE-2008-5188 URL:http://osvdb.org/50353  View
387019 35305 CVE-2008-5188 OSVDB:50354  View
387020 35305 CVE-2008-5188 URL:http://osvdb.org/50354  View
387021 35305 CVE-2008-5188 OSVDB:50355  View
387022 35305 CVE-2008-5188 URL:http://osvdb.org/50355  View
387023 35305 CVE-2008-5188 OVAL:oval:org.mitre.oval:def:9607  View
387024 35305 CVE-2008-5188 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9607  View
387025 35305 CVE-2008-5188 SECUNIA:32382  View
387026 35305 CVE-2008-5188 URL:http://secunia.com/advisories/32382  View
387027 35305 CVE-2008-5188 SECUNIA:36552  View
387028 35305 CVE-2008-5188 URL:http://secunia.com/advisories/36552  View
387029 35305 CVE-2008-5188 XF:ecryptfsutils-setupprivate-info-disclosure(46073)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
49782 JVNDB-2008-005092 W1L3D4 Philboard の forum.asp における SQL インジェクションの脆弱性 W1L3D4 Philboard の forum.asp には、SQL インジェクションの脆弱性が存在します。 CVE-2008-5192 35305 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005092.html  View