CVE-2010-3074

2010-09-1718:00:02

Debian Security Bug Tracker

security-tracker.debian.org

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

EPSS

Percentile

10.1%

JSON

SSL_Cipher.cpp in EncFS before 1.7.0 uses an improper combination of an AES cipher and a CBC cipher mode for encrypted filesystems, which allows local users to obtain sensitive information via a watermark attack.

OSVersionArchitecturePackageVersionFilename
Debian12allencfs< 1.7.2-1encfs_1.7.2-1_all.deb
Debian11allencfs< 1.7.2-1encfs_1.7.2-1_all.deb
Debian999allencfs< 1.7.2-1encfs_1.7.2-1_all.deb
Debian13allencfs< 1.7.2-1encfs_1.7.2-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	encfs	< 1.7.2-1	encfs_1.7.2-1_all.deb
Debian	11	all	encfs	< 1.7.2-1	encfs_1.7.2-1_all.deb
Debian	999	all	encfs	< 1.7.2-1	encfs_1.7.2-1_all.deb
Debian	13	all	encfs	< 1.7.2-1	encfs_1.7.2-1_all.deb