CVE-2008-5188

State: Published
Severity: Not scored
Published: Nov 21, 2008
Updated: Aug 7, 2024
Reserved: Nov 20, 2008

Description

The (1) ecryptfs-setup-private, (2) ecryptfs-setup-confidential, and (3) ecryptfs-setup-pam-wrapped.sh scripts in ecryptfs-utils 45 through 61 in eCryptfs place cleartext passwords on command lines, which allows local users to obtain sensitive information by listing the process.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

[oss-security] 20081023 CVE request for ecryptfsmailing-list
[oss-security] 20081029 Re: CVE request for ecryptfsmailing-list
https://launchpad.net/bugs/287908
http://git.kernel.org/?p=linux/kernel/git/mhalcrow/ecryptfs-utils.git%3Ba=commit%3Bh=06de99afd53f03fe07eda0ad9d61ac6d5d4d9f53
50355vdb-entry
[oss-security] 20081029 Re: CVE request for ecryptfsmailing-list
32382third-party-advisory
50354vdb-entry
ecryptfsutils-setupprivate-info-disclosure(46073)vdb-entry
49334vdb-entry
RHSA-2009:1307vendor-advisory
36552third-party-advisory
oval:org.mitre.oval:def:9607vdb-entrysignature
50353vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.