ecryptfs-utils: information disclosure
| Package(s): | ecryptfs-utils | CVE #(s): | CVE-2014-9687 | ||||||||||||||||||||
| Created: | March 11, 2015 | Updated: | July 30, 2015 | ||||||||||||||||||||
| Description: | From the Ubuntu advisory:
Sylvain Pelissier discovered that eCryptfs did not generate a random salt when encrypting the mount passphrase with the login password. An attacker could use this issue to discover the login password used to protect the mount passphrase and gain unintended access to the encrypted files. | ||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||