NVD

Id
4972  
Name
CVE-2008-5188  
Description
The (1) ecryptfs-setup-private, (2) ecryptfs-setup-confidential, and (3) ecryptfs-setup-pam-wrapped.sh scripts in ecryptfs-utils 45 through 61 in eCryptfs place cleartext passwords on command lines, which allows local users to obtain sensitive information by listing the process.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-11-20  
Modified Date
2013-01-22  
Seq
2008-5188  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
31158 4972 CVE-2008-5188 http://git.kernel.org/?p=linux/kernel/git/mhalcrow/ecryptfs-utils.git;a=commit;h=06de99afd53f03fe07eda0ad9d61ac6d5d4d9f53  View
31159 4972 CVE-2008-5188 oval:org.mitre.oval:def:9607  View
31160 4972 CVE-2008-5188 RHSA-2009:1307  View
31161 4972 CVE-2008-5188 [oss-security] 20081023 CVE request for ecryptfs  View
31162 4972 CVE-2008-5188 [oss-security] 20081029 Re: CVE request for ecryptfs  View
31163 4972 CVE-2008-5188 [oss-security] 20081029 Re: CVE request for ecryptfs  View
31164 4972 CVE-2008-5188 ecryptfsutils-setupprivate-info-disclosure(46073)  View
31165 4972 CVE-2008-5188 https://launchpad.net/bugs/287908  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47110 JVNDB-2008-002420 eCryptfs の ecryptfs-utils における情報漏えいの脆弱性 eCryptfs の ecryptfs-utils には、コマンドラインに平文でパスワードを渡す不備があるため、プロセスを一覧化することにより重要な情報を取得される脆弱性が存在します。 CVE-2008-5188 35301 CVE-2008-5188 4972 7.2 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002420.html 2008-11-21 2009-10-09 View