Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2013-7252
HistoryJan 18, 2015 - 6:59 p.m.

CVE-2013-7252

2015-01-1818:59:00
Debian Security Bug Tracker
security-tracker.debian.org
12

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.004

Percentile

74.1%

kwalletd in KWallet before KDE Applications 14.12.0 uses Blowfish with ECB mode instead of CBC mode when encrypting the password store, which makes it easier for attackers to guess passwords via a codebook attack.

OSVersionArchitecturePackageVersionFilename
Debian10allkde-runtime< 4:4.12.2-1kde-runtime_4:4.12.2-1_all.deb

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.004

Percentile

74.1%