CVE-2008-5188

Publication date 21 November 2008

Last updated 24 July 2024

Ubuntu priority

Low

Why this priority?

The (1) ecryptfs-setup-private, (2) ecryptfs-setup-confidential, and (3) ecryptfs-setup-pam-wrapped.sh scripts in ecryptfs-utils 45 through 61 in eCryptfs place cleartext passwords on command lines, which allows local users to obtain sensitive information by listing the process.

Read the notes from the security team

Status

Package Ubuntu Release Status
ecryptfs-utils 8.10 intrepid
Not affected
8.04 LTS hardy
Not affected
7.10 gutsy
Not affected
6.06 LTS dapper Not in release

Notes

jdstrand

affected code introduced during Ubuntu 8.10 develop cycle