{"id":"CVE-2008-5188","aliases":["DEBIAN-CVE-2008-5188","EUVD-2008-5166","GHSA-84hq-4h95-83xw","RHSA-2009:1307"],"status":"published","title":"The (1) ecryptfs-setup-private, (2) ecryptfs-setup-confidential, and (3) ecryptfs-setup-pam...","description":"The (1) ecryptfs-setup-private, (2) ecryptfs-setup-confidential, and (3) ecryptfs-setup-pam-wrapped.sh scripts in ecryptfs-utils 45 through 61 in eCryptfs place cleartext passwords on command lines, which allows local users to obtain sensitive information by listing the process.","severity":{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00386,"percentile":0.32939,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-255"],"published":"2008-11-21T02:00:00Z","modified":"2026-10-23T17:47:41Z","fixes":[{"ecosystem":"Debian:12","package":"ecryptfs-utils","fixed_in":["66-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"ecryptfs-utils","fixed_in":["66-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"ecryptfs-utils","fixed_in":["66-1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"ecryptfs-utils","fixed_in":["0:75-5.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"ecryptfs-utils-debuginfo","fixed_in":["0:75-5.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"ecryptfs-utils-devel","fixed_in":["0:75-5.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"ecryptfs-utils","fixed_in":["0:75-5.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"ecryptfs-utils-debuginfo","fixed_in":["0:75-5.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::client","package":"ecryptfs-utils-gui","fixed_in":["0:75-5.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"ecryptfs-utils","fixed_in":["0:75-5.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"ecryptfs-utils-debuginfo","fixed_in":["0:75-5.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"ecryptfs-utils-devel","fixed_in":["0:75-5.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"ecryptfs-utils-gui","fixed_in":["0:75-5.el5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"ecryptfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"66-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"ecryptfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"66-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"ecryptfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"66-1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"ecryptfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:75-5.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"ecryptfs-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:75-5.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client_workstation","package":"ecryptfs-utils-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:75-5.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"ecryptfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:75-5.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"ecryptfs-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:75-5.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::client","package":"ecryptfs-utils-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:75-5.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"ecryptfs-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:75-5.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"ecryptfs-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:75-5.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"ecryptfs-utils-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:75-5.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"ecryptfs-utils-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:75-5.el5"}]}]}],"products":[{"vendor":"ecryptfs","product":"ecryptfs_utils"}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2008/10/23/3","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/29/7","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://launchpad.net/bugs/287908","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/mhalcrow/ecryptfs-utils.git%3Ba=commit%3Bh=06de99afd53f03fe07eda0ad9d61ac6d5d4d9f53","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://osvdb.org/50355","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","web"]},{"url":"http://www.openwall.com/lists/oss-security/2008/10/29/4","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://secunia.com/advisories/32382","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"http://osvdb.org/50354","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","web"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46073","tags":["vdb-entry","x_refsource_XF","x_transferred","web"]},{"url":"http://osvdb.org/49334","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2009-1307.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/36552","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9607","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","web"]},{"url":"http://osvdb.org/50353","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-5188","tags":["advisory"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/mhalcrow/ecryptfs-utils.git;a=commit;h=06de99afd53f03fe07eda0ad9d61ac6d5d4d9f53"},{"url":"https://github.com/advisories/GHSA-84hq-4h95-83xw"},{"url":"https://security-tracker.debian.org/tracker/CVE-2008-5188","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2009:1307","tags":["advisory"]},{"url":"http://www.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=460496","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=472524","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=475969","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=482834","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=499128","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=499367","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=500352","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=500361","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=500566","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=500623","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=500804","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=500810","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=500813","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=500817","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=500820","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=500824","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=500829","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=500850","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=500997","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=501275","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=501460","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1307.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-5188","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-5188","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2008-5188","description":"The (1) ecryptfs-setup-private, (2) ecryptfs-setup-confidential, and (3) ecryptfs-setup-pam-wrapped.sh scripts in ecryptfs-utils 45 through 61 in eCryptfs place cleartext passwords on command lines, which allows local users to obtain sensitive information by listing the process.","status":"published","published":"2008-11-21T02:00:00Z","modified":"2024-08-07T10:40:17.228Z","updated_at":"2026-11-02T14:34:43.943588Z"}],"euvd":[{"id":"EUVD-2008-5166","description":"The (1) ecryptfs-setup-private, (2) ecryptfs-setup-confidential, and (3) ecryptfs-setup-pam-wrapped.sh scripts in ecryptfs-utils 45 through 61 in eCryptfs place cleartext passwords on command lines, which allows local users to obtain sensitive information by listing the process.","status":"published","published":"2008-11-21T02:00:00Z","modified":"2024-08-07T10:40:17Z","updated_at":"2026-11-03T01:38:44.406504Z"}],"ghsa":[{"id":"GHSA-84hq-4h95-83xw","title":"The (1) ecryptfs-setup-private, (2) ecryptfs-setup-confidential, and (3) ecryptfs-setup-pam...","description":"The (1) ecryptfs-setup-private, (2) ecryptfs-setup-confidential, and (3) ecryptfs-setup-pam-wrapped.sh scripts in ecryptfs-utils 45 through 61 in eCryptfs place cleartext passwords on command lines, which allows local users to obtain sensitive information by listing the process.","status":"published","published":"2022-05-17T00:45:23Z","modified":"2025-04-09T04:01:59Z","updated_at":"2026-11-02T15:00:58.538673Z"}],"nvd":[{"id":"CVE-2008-5188","description":"The (1) ecryptfs-setup-private, (2) ecryptfs-setup-confidential, and (3) ecryptfs-setup-pam-wrapped.sh scripts in ecryptfs-utils 45 through 61 in eCryptfs place cleartext passwords on command lines, which allows local users to obtain sensitive information by listing the process.","status":"published","published":"2008-11-21T02:30:00.563Z","modified":"2026-06-16T22:59:25.723Z","cvss":[{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-255"],"updated_at":"2026-11-02T14:01:29.702694Z"}],"osv":[{"id":"CVE-2008-5188","description":"The (1) ecryptfs-setup-private, (2) ecryptfs-setup-confidential, and (3) ecryptfs-setup-pam-wrapped.sh scripts in ecryptfs-utils 45 through 61 in eCryptfs place cleartext passwords on command lines, which allows local users to obtain sensitive information by listing the process.","status":"published","published":"2008-11-21T02:30:00Z","modified":"2026-04-10T03:40:23.217459Z","updated_at":"2026-11-02T15:43:57.452479Z"},{"id":"DEBIAN-CVE-2008-5188","description":"The (1) ecryptfs-setup-private, (2) ecryptfs-setup-confidential, and (3) ecryptfs-setup-pam-wrapped.sh scripts in ecryptfs-utils 45 through 61 in eCryptfs place cleartext passwords on command lines, which allows local users to obtain sensitive information by listing the process.","status":"published","published":"2008-11-21T02:30:00.563Z","modified":"2026-10-23T17:47:41.029941438Z","updated_at":"2026-11-02T15:45:23.742363Z"},{"id":"RHSA-2009:1307","title":"Red Hat Security Advisory: ecryptfs-utils security, bug fix, and enhancement update","status":"published","published":"2024-09-15T17:54:09Z","modified":"2026-06-26T12:18:47.236456261Z","updated_at":"2026-11-02T15:53:00.468834Z"}]}}