utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 does not properly check mountpoint permissions, which allows local users to remove directories via a umount system call.
http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00009.html
https://bugzilla.redhat.com/show_bug.cgi?id=729465