Oval Definition:oval:org.mitre.oval:def:12849
Revision Date:2014-06-30Version:19
Title:USN-783-1 -- ecryptfs-utils vulnerability
Description:Chris Jones discovered that the eCryptfs support utilities would report the mount passphrase into installation logs when an eCryptfs home directory was selected during Ubuntu installation. The logs are only readable by the root user, but this still left the mount passphrase unencrypted on disk, potentially leading to a loss of privacy.
Family:unixClass:patch
Status:ACCEPTEDReference(s):CVE-2009-1296
USN-783-1
USN-783-1
Platform(s):Ubuntu 9.04
Product(s):ecryptfs-utils
Definition Synopsis
  • Ubuntu 9.04 is installed
  • AND Supported architectures section
  • Installed architecture is sparc
  • OR Installed architecture is i386
  • OR Installed architecture is amd64
  • OR Installed architecture is lpia
  • OR Installed architecture is powerpc
  • AND Packages section
  • ecryptfs-utils DPKG is earlier than 73-0ubuntu6.1
  • OR libecryptfs0 DPKG is earlier than 73-0ubuntu6.1
  • OR libecryptfs-dev DPKG is earlier than 73-0ubuntu6.1
  • BACK