Stay Secure with the Latest Linux Advisories

security advisorymoderatevulnerability

Ubuntu 15.10 USN-2876-1: Moderate eCryptfs Program Escalation

mount.ecryptfs_private could be used to run programs as an administrator.. =========================================================================Ubuntu Security Notice USN-2876-1 January 20, 2016 ecryptfs-utils vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 15.10 - Ubuntu 15.04 - Ubuntu 14.04 LTS - Ubuntu 12.04 LTS Summary: mount.ecryptfs_private could be used to run programs as an administrator. Software Description: - ecryptfs-utils: eCryptfs cryptographic filesystem utilities Details: Jann Horn discovered that mount.ecryptfs_private would mount over certain directories in the proc filesystem. A local attacker could use this to escalate their privileges. (CVE-2016-1572) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 15.10: ecryptfs-utils 108-0ubuntu1.1 Ubuntu 15.04: ecryptfs-utils 107-0ubuntu1.3 Ubuntu 14.04 LTS: ecryptfs-utils 104-0ubuntu1.14.04.4 Ubuntu 12.04 LTS: ecryptfs-utils 96-0ubuntu3.5 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-2876-1 CVE-2016-1572 Package Information: https://launchpad.net/ubuntu/+source/ecryptfs-utils/108-0ubuntu1.1 https://launchpad.net/ubuntu/+source/ecryptfs-utils/107-0ubuntu1.3 https://launchpad.net/ubuntu/+source/ecryptfs-utils/104-0ubuntu1.14.04.4 https://launchpad.net/ubuntu/+source/ecryptfs-utils/96-0ubuntu3.5 . The Ubuntu Security Advisory USN-2876-1 details a vulnerability in ecryptfs-utils that could lead to local privilege escalation. Continuing on, discover the implications.. ecryptfs issue, ubuntu update, ecryptfs-utils, security notice, privilege escalation. . Severity: Important. LinuxSecurity.com Team

Jan 20, 2016 •Important Ubuntu