CVE-2011-3145 mount.ecrpytfs_private sets group owner of /etc/mtab to user's primary group
Local attackers can escalate privileges because mount.ecryptfs_private fails to set the effective group ID, allowing unauthorized modification of mtab.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2011-3145?
CVE-2011-3145 is a low-severity vulnerability in n/a, published on 22 Apr 2019. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
When mount.ecrpytfs_private before version 87-0ubuntu1.2 calls setreuid() it doesn't also set the effective group id. So when it creates the new version, mtab.tmp, it's created with the group id of the user running mount.ecryptfs_private.
Weakness: CWE-254
Which versions are affected by CVE-2011-3145?
It affects 1 product.
Products include Mount.ecrpytfs Private Project Mount.ecrpytfs Private.
How do I fix CVE-2011-3145?
Apply the vendor's patch.
Is CVE-2011-3145 being exploited?
There is no known exploitation of CVE-2011-3145 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2011-3145, GHSA-r6pf-mxwq-6rrh.