Vulnerability Details CVE-2012-3409
ecryptfs-utils: suid helper does not restrict mounting filesystems with nosuid,nodev which creates a possible privilege escalation
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 23.3%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 4.6
References
- http://www.openwall.com/lists/oss-security/2012/07/11/23
- http://www.openwall.com/lists/oss-security/2012/07/12/1
- http://www.openwall.com/lists/oss-security/2012/07/13/5
- https://access.redhat.com/security/cve/cve-2012-3409
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-3409
- https://security-tracker.debian.org/tracker/CVE-2012-3409
- http://www.openwall.com/lists/oss-security/2012/07/11/23
- http://www.openwall.com/lists/oss-security/2012/07/12/1
- http://www.openwall.com/lists/oss-security/2012/07/13/5
- https://access.redhat.com/security/cve/cve-2012-3409
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-3409
- https://security-tracker.debian.org/tracker/CVE-2012-3409
Products affected by CVE-2012-3409
-
cpe:2.3:a:ecryptfs:ecryptfs-utils:86
-
cpe:2.3:a:ecryptfs:ecryptfs-utils:87
-
cpe:2.3:a:ecryptfs:ecryptfs-utils:89
-
cpe:2.3:a:ecryptfs:ecryptfs-utils:90
-
cpe:2.3:a:ecryptfs:ecryptfs-utils:91
-
cpe:2.3:a:ecryptfs:ecryptfs-utils:92
-
cpe:2.3:a:ecryptfs:ecryptfs-utils:93
-
cpe:2.3:a:ecryptfs:ecryptfs-utils:94
-
cpe:2.3:a:ecryptfs:ecryptfs-utils:95
-
cpe:2.3:a:ecryptfs:ecryptfs-utils:97
-
cpe:2.3:o:debian:debian_linux:8.0
-
cpe:2.3:o:debian:debian_linux:9.0