Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2011-1836

17
FAUCET Score

CVE-2011-1836 describes a local privilege escalation vulnerability in ecryptfs-utils versions prior to 90, specifically within the utils/ecryptfs-recover-private script. The flaw stems from the script failing to establish a subdirectory with secure permissions during the recovery process, potentially allowing local users to bypass intended access restrictions through standard filesystem operations. With a CVSS score of 4.6 (AV:L/AC:L/Au:N/C:P/I:P/A:P), this vulnerability has low attack complexity and requires local access, leading to potential confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage, suggesting it is not a widely targeted or discussed vulnerability.

Impacted Technologies

VendorProductVersion(s)CPE
<= 89CPE matchmatch criteria
cpe:2.3:a:ecryptfs:ecryptfs-utils:*:*:*:*:*:*:*:*
62CPE matchmatch criteria
cpe:2.3:a:ecryptfs:ecryptfs-utils:62:*:*:*:*:*:*:*
63CPE matchmatch criteria
cpe:2.3:a:ecryptfs:ecryptfs-utils:63:*:*:*:*:*:*:*
64CPE matchmatch criteria
cpe:2.3:a:ecryptfs:ecryptfs-utils:64:*:*:*:*:*:*:*
65CPE matchmatch criteria
cpe:2.3:a:ecryptfs:ecryptfs-utils:65:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

4.6MEDIUM

AV:L/AC:L/Au:N/C:P/I:P/A:P

Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Exploitability Score
3.9
Impact Score
6.4
CvssVersion
2.0

Exploit Intelligence

EPSS Score
0.38%
Probability of exploitation in next 30 days
EPSS Percentile
30.4%
Percentile rank of EPSS score among Peer Group
As of 2026-07-24
Model: v2026.06.15
This CVE's current EPSS score of 0.0038 is in the 51st percentile among its peer group of 3,048 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Patches (1)

redhatvendor investigatingvia nvd_reference
View patch

Vendor Advisories (1)

redhatCVE-2011-1836Low

ecryptfs-utils: ecryptfs-recover-private insecure permissions on the temporary mount point

Aug 9, 2011

References

lists.opensuse.org / opensuse-security-announce/2011-08/msg00009.html
bugzilla.redhat.com / show_bug.cgi
Vendor Advisory
launchpad.net / ecryptfs/+download
ubuntu.com / usn/USN-1188-1