CVE-2011-1835: Ecryptfs Ecryptfs-Utils

Medium severity, CVSS 4.4. EPSS: 0.4% chance of exploitation in the next 30 days.

The encrypted private-directory setup process in utils/ecryptfs-setup-private in ecryptfs-utils before 90 does not properly ensure that the passphrase file is created, which might allow local users to bypass intended access restrictions at a certain time in the new-user creation steps.

Affected products

• Ecryptfs Ecryptfs-Utils: up to and including 89; version 62 only; version 63 only; version 64 only; version 65 only; version 66 only; …
• Ecryptfs Ecryptfs Utils: version 58 only; version 59 only; version 60 only; version 61 only

Published 2014-02-15. Last modified 2026-06-16.