utils/ecryptfs-recover-private in ecryptfs-utils before 90 does not establish a subdirectory with safe permissions, which might allow local users to bypass intended access restrictions via standard filesystem operations during the recovery process. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-1836
